1589e88fbf894efdcad5e77c2619d3eb253ad264b64c6ac67eb93c56d9b47e19ae339ac099142673b5493fdae7851a0d9e06cda08ed2c65efd4277e795afa086553ef9f3d57cac19cdf20e9dccd0904bb5720516b043d4100ff0adc72579a55ef6c5fb75c93054770f948a4b7884b835d2b3fea40e9d6265dcb25b394bb5f41751c9921c64b54f1a4538080436d766f51ae6c73ce2e50e383c3fafabd38f18f864e2b0afb066971d72cd7a85907d6614104937ba22b2f76392d154d2344573ccb5ddf07bd574d4c6fc04f21e3713ad20cba4d939c015536766686e5895428f2af427f6e512d26bb0ec2b1eededb38d3ac77c3b1f7ab84a3e98c6e445113a152f9abf98b4b1b465c7b36b33c6e44e40c5b7f2429f9ee9ba9908e5b3735286a4c0845ada32789cf737f3a28715c2f452d4e673f62fe38427ffab17ae396c82097b04127c4c5a898668fe5bac9750f789de3f5b0032a7787bd7fb924d669e5b484e32ce60c2c38b5462aa47fc15a16ed43fe182ef2729da2f4ed0e65fb1976bdac7cfa94e577ebd55949b66f6cec49538cf9b0f8679f983a8f8c445b6970861fc08e64121bfbdf2824aabbbc7ea2ca751df5381ab2166991781a6d22a80287b0171094709930c5b818a731273add5899153e714209f2c9b751eacb8f0e225ad52414bdfeee228f61a522e72236252b5ad623b44bbec3f9ba0b461ba53e71abff32458b5034619cabb5c837827bb49eddfadf05737f0114acb270d248bbdc00d86bc3c0ba2f3b639ccb26f3cbe100b879d384188a0b68f57bd644f275167fb5ad939a4c6d8dc28f93c28a472ec11d986fc7584d913b7961abfe7b98d5d7d1e030d9f6817eabfcbe67636bdd30e738072367d791533271f3e51c32be6aed5da2f8882737c43883b405de48800c14746a17968ce8d49dd2a350c42e7135e9c6e752b9dfe84f36bf6959d66fac2e3737798ada18afb67e1f38212823b5972ed63d1f658a55ef76", 0x1000, 0x7, 0x0, 0x1, 0xffffffffffffff9c}, &(0x7f0000000180)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r2, 0x80044941, &(0x7f0000000340)) 04:19:42 executing program 1: r0 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={'syz', 0x1}, &(0x7f0000000100)="431a272d4aa1b686b6f6c43ec959e968523b73997e66321c23b31f4a93b0f8696d67fd24bf20e59f1d86462b4b762031d7d0a8e2d6d90d20cc2f5125dbe882f1c4701c13f562f5ab2ccd04314d23be6b2fa6c682d85d2b6960f30c177e09374df331870665868b98e1a26a2e9b", 0x6d, 0xfffffffffffffffa) keyctl$invalidate(0x15, r0) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000340)=0x14) read(r1, &(0x7f0000000000)=""/128, 0x20000080) 04:19:42 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_validatetrans(0xffffffffffffff9c, &(0x7f0000000380)='/selinux/validatetrans\x00', 0x1, 0x0) write$P9_RGETATTR(r1, &(0x7f0000000200)={0xa0}, 0xa0) 04:19:42 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}}, {{@in=@dev}, 0x0, @in=@multicast1}}, &(0x7f0000000200)=0xe8) setsockopt$inet6_mreq(r2, 0x29, 0x15, &(0x7f0000000240)={@loopback, r3}, 0x14) 04:19:42 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) getsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000480)={0x0, 0x8, 0x6, 0x62}, &(0x7f00000004c0)=0x10) r5 = getpid() tkill(r5, 0xb) ioctl$void(r0, 0x5450) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000500)={r4, 0x6, 0x9, 0x5}, 0x10) socketpair(0xb, 0x800, 0x1c0000, &(0x7f0000001540)) sendmsg$can_raw(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x1d, r3}, 0x10, &(0x7f0000000400)={&(0x7f0000000380)=@canfd={{0x3, 0x3, 0x100000001, 0x80000001}, 0x32, 0x3, 0x0, 0x0, "7e3e8bf32c650fb9b18c17b67811041ce99e54df2270f709cab56d1e2c8e1e25b86dedcf170091246e4070466d2ed9a7c1b3329fbbb1309c5eeeb13e02a71631"}, 0x48}, 0x1, 0x0, 0x0, 0x80c0}, 0x40000) [ 377.906387] audit: type=1400 audit(1552018782.799:73): avc: denied { validate_trans } for pid=20653 comm="syz-executor.4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:security_t:s0 tclass=security permissive=1 04:19:42 executing program 4: rt_tgsigqueueinfo(0x0, 0x0, 0x16, 0x0) ioctl$BLKRRPART(0xffffffffffffffff, 0x125f, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) syz_open_procfs(0x0, &(0x7f0000000340)='\x00\x00\x00\x00\x00') r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(0xffffffffffffffff, 0x0, 0x485, 0x0, 0x0) mount(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000540)='ramfs\x00', 0x0, 0x0) chdir(&(0x7f00000001c0)='./file0\x00') r1 = creat(&(0x7f0000000240)='./bus\x00', 0x0) ftruncate(r1, 0x208200) r2 = open(&(0x7f0000000200)='./bus\x00', 0x14103e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x4002011, r2, 0x0) preadv(r0, &(0x7f0000000180)=[{&(0x7f00000000c0)=""/81, 0x20000111}], 0x1, 0x2000107c) [ 378.010230] audit: type=1400 audit(1552018782.839:74): avc: denied { setattr } for pid=20659 comm="syz-executor.2" name="fd" dev="proc" ino=56345 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 378.231380] audit: type=1400 audit(1552018783.119:75): avc: denied { map } for pid=20846 comm="syz-executor.4" path="/root/syzkaller-testdir681398280/syzkaller.vPeIgq/319/file0/file0/bus" dev="ramfs" ino=56369 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:ramfs_t:s0 tclass=file permissive=1 04:19:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0xe, 0x0, 0x0) 04:19:43 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0)=[{&(0x7f0000000040)=""/70, 0x46}, {&(0x7f00000000c0)=""/144, 0x90}, {&(0x7f0000000200)=""/152, 0x98}, {&(0x7f0000000380)=""/254, 0xfe}, {&(0x7f0000000480)=""/254, 0xfe}, {&(0x7f0000000580)=""/4096, 0x1000}], 0x6) ioctl$int_out(r0, 0x5460, &(0x7f0000000000)) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000180)='/dev/rtc0\x00', 0x12102, 0x0) sendmsg(r1, &(0x7f0000001840)={&(0x7f00000016c0)=@llc={0x1a, 0x33a, 0x9, 0xfffffffffffff001, 0x8, 0xa3}, 0x80, &(0x7f0000001800)=[{&(0x7f0000001740)="fa54e3fe8090ffcfdd60c24ad4f39af7a63e3452fff1ebcde55b915e01e4fcfcb4d2743f1eb3b9ca6ee6d1daf103712ef97debb145f421af4d134ae7dc36638eebbda8151e8876d84437909d703717aa57cb71af7cca3669925df35d520489be47be85823b4c5b5a1669ef26fbf16a867880bf0b8b29187bb82d3be83816aa93b7c07bbb9f4053d6ff5a312dd69cf0b10a3790d4943d4ca85541f1cb1619c759201debd19568848671dd740899ec1c8fa7023dffb85903a87b0f61fe", 0xbc}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffff9c, 0x84, 0x11, &(0x7f0000001580)={0x0, 0x7f03f721}, &(0x7f00000015c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000001600)={r3, @in6={{0xa, 0x4e21, 0x4, @empty, 0xa4}}, 0xfbd4, 0x1f}, 0x90) listen(r1, 0x7) 04:19:43 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0) r2 = syz_open_procfs(r1, &(0x7f0000000280)='attr/fscreate\x00\xb7a\xba\xe1M\xf6\x19\x05\x1a\n\xa7Av\xb7\x94\x8a\xf9\x02\x7f\xc75\xe7\xdf\n#HO\xb5\xe5,\xf6U\xe8\xab!\xa9\x15\xdb\xfe\x93k\x87\xf2\x06m\xd3J\xff\x90:\xbbya\x03|1x\'\xc5\xfe\nC\xe0\x97Q\x0fe\x023_\xbe,7/') fchdir(r2) r3 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) ioctl$KDSETKEYCODE(r2, 0x4b4d, &(0x7f00000001c0)={0x1, 0x3}) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000200)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) write(r3, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) setsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000000)=0x9, 0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r3, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:19:43 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:19:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0xf, 0x0, 0x0) 04:19:44 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp\xf7\xa3\x97RZd\x02\x12\x9e\x13\xc6\xbcW;\xcb\xe3\x1c\x1c_O\xc0eC)=02\x97\x9d[\xadi\x84N\t\x89\xc5\xe4\x11Mi\xe29\x0e\xfd\xba\x9a\xc2\\+\nc`ZH\x06s\x16F4\xe3\xb9z\x8a\xbe\xd8\xc4\x1b\x83L/Pv\x88\xc5<\xd0^\x03E\x1d\xbe\xa5E\x14\x1f}\x9c\xf8\xfbHe\xc3z\xb0\xa5\'SB\x826G\xac/1p\xb6\x85\n\x8a\x025\'g\xbe\xef_\x94\xa3x\xaf\xb0`N\\6q\xd7\xf7CZ\x1c\xdb\x97\xab\xb7\x1d\xf4:\xe59H\'\xb70\x86`~ok_\xa9\x00U\x00\x1a\xc9\x9fyg\x10\x96\xa6\xd6[\x03\xd6\xcd7Y\xf8\xcd9\xa49\xdf\x11e\x03\xdc\xba\x7f\xaf\x12\xd9~\x7f\xaaV\xb4\xd7\x0f\xdd\x7f.L\x84\v\xcb\xbc4W\x84\x96m\xae\xea`\xbb\xdf\xc7\xefS\x98\xbc89\xf5\xc7\xad\xd4\x0eE\xd5c\x1dx\x1eS\x99.\xd6\v\xb1\xf6\x8an\xbf\x7fzy\x8eQ\xdbd\x8c(\x95\xce\xf31XU;\x15\xe3\x1b\xfe\x8fuBo\x11\xf5\x02%\xba\xcf\x15\xdf\xe3\xa4\xcd\xc9\x7f\x99\xdfa4\xd6\xc5\x1c\x89H\xa6{\x00n{\xdc9\xde\\\x9a\xa5\xcb\f\xf8\fV\xa8\xd0\xa5A6 \x86\x10\xf6$\x82Q\x86\xa3s\xba\x14\xbb\xe9Z\xc8\xaa\xb5\xb6c\x15', 0x1) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r1, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) syz_mount_image$minix(&(0x7f0000000080)='minix\x00', &(0x7f0000000180)='./file1\x00', 0x6, 0x8, &(0x7f0000001680)=[{&(0x7f00000001c0)="567a17cec521a37864f6577d78d47f34a9a9b913110c020dca3b35db392ed74676b3f909a4b1aa109814b43f78f8625337fcc90b83db023e48f2d8f4d100c354d64cb672f769f9774839cdb44b474364a8067aff6a826bf62a0140372821cd143b8a703216021d01bfee1415b40cddb7e2450bfad32b4d860be0d64d5cc6d31407d0a282535e1ca1505e5238eab99aa1d914934fc161c041e4d5515153feffc73ec1431cbf267f50d1c1463359a4173c53d36f99a6441b0e4a89cbefd993cd55e02c1012c818f3be81315e2e4299383417a9c43cb3a73f394b6081a25ecf7c3458c6b6dabc3f8db2afd75cba2e38", 0xee, 0x78a}, {&(0x7f00000002c0)="eaf8934fc97cb0b4270027f135dca3", 0xf, 0x20}, {&(0x7f0000000380)="233d5a22f10d70595d90ecac6523f5294984a74c7f98fe097a9d86356c73ea51a8792f2a82cc77a91adbf44c90875e648797baf643b3d360e1398934bd3a9ea9cc8e3c7577ae0ff54fe9590a4fd1b9bc99c4848089d69d2b4c46211be1441f33e158bd2c1b8e9c2b9dc25f8387350e4503f774a12a96fb7340242b446eba6e22bb5cbae454d624181ce526178d6e9f1039c2c4", 0x93, 0xffffffffffffffe1}, {&(0x7f0000000440)="8fcc13a33cee2301e0fcb63080157e044280a4450989e52b81887a801fecdfbb8cbb27d4231ccaed5345ac29b9f5b191727527a5e0446bb611a2e46015faa3", 0x3f, 0x4}, {&(0x7f0000000480)="32e66eeb3f2c62f085fc9efa5ae28394b36df9832bce7bc94609df95441dc41e991b6ae324dde7318f681051c4c0d00544cc3c2fc821198df83c9191e7a2f1383589a1f83088c417b30c12739e627d73eb34d3f2aa0896ed10416361687273b28cf2e9357ee9bc7ad77e8a28f524e45c01961a2673eca666d1decf06626553d8958d8ce4686682225a4ab98b95e6db6261dec69e34405201d77cea884641cc03f87c2dd443661919fc45310e456e71cfb14e4e4d6c52ea9a715fd0d34717b3c22efd24998ff57173b5da0da4089e146f04251ee1bba54496ca8be2f963e951045c107908935a576d49a68fa1c2f877a56f290af495", 0xf5, 0x5}, {&(0x7f0000000580)="4f3b392f06cd775286bab2664ea238abbda896", 0x13, 0x400}, {&(0x7f00000005c0)="4a2914da4d2d511d3bf88907cdb59a6aa2dad73476702ed7e7b20f2964553b157329a045696e840cb9eb0b757b29a3bcebc8b9c6e9ae58ccf4751653a707e57f46ebe0a695225419d41cb4e2dca29be6b68df11889699965e76895d02ce10621b428471d4b327e064e0e07748404d853ccf5d4f850e70d9f572d8b955e06edb78ece340a330f1606e42d556fb910359e925fda4e0fdd", 0x96, 0x8}, {&(0x7f0000000680)="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", 0x1000}], 0x8076, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001900)='/dev/video37\x00', 0x2, 0x0) 04:19:44 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:19:54 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x10, 0x0, 0x0) 04:19:54 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:19:54 executing program 4: 04:19:54 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:04 executing program 3: openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:20:04 executing program 4: 04:20:04 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x11, 0x0, 0x0) 04:20:04 executing program 4: 04:20:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x7dc, 0x10000) fsetxattr$security_ima(r0, &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@md5={0x1, "17c47461df374bed8964207259dd1dc4"}, 0x11, 0x3) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) 04:20:04 executing program 4: 04:20:05 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:15 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) madvise(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1f) 04:20:15 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x14, r1, 0xffffff1f}, 0x14}}, 0x0) 04:20:15 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x12, 0x0, 0x0) 04:20:15 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000000)) 04:20:15 executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) r1 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r0, 0x6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x20}}, 0x10) sendmmsg(r1, &(0x7f0000000800)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=[{0x10}], 0x10}, 0x1000}], 0x1, 0x0) 04:20:15 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}) getresgid(&(0x7f0000000000)=0x0, &(0x7f0000000080), &(0x7f0000000200)) write$FUSE_ATTR(r1, &(0x7f0000000240)={0x78, 0xffffffffffffffff, 0x2, {0xde, 0xfffffffffffffffa, 0x0, {0x4, 0x9, 0x0, 0x3, 0x9, 0x200, 0x0, 0x8, 0x738, 0x3fe, 0x10000, r3, r4, 0x9, 0x7}}}, 0x78) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:20:15 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:25 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) fsetxattr(r0, &(0x7f0000000000)=@random={'trusted.', ',eth0cpuset(.{vboxnet0-^-@eth1eth1#system[#!eth1\x00'}, &(0x7f0000000040)='%posix_acl_accessvboxnet1\x00', 0x1a, 0x1) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:20:25 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x13, 0x0, 0x0) 04:20:25 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000000)=0x0) getpgid(r1) 04:20:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:25 executing program 4: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2000000000000013, 0x10, 0x3}, 0x2c) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r1, &(0x7f0000000040), 0x0}, 0x18) 04:20:25 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}, &(0x7f0000000240)=0xc) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$9p_unix(&(0x7f0000000080)='./file1\x00', &(0x7f0000000180)='./file0/file0\x00', &(0x7f00000001c0)='9p\x00', 0x1800, &(0x7f00000005c0)=ANY=[@ANYBLOB='trans=unix,noextend,dfltuid=', @ANYRESHEX=r3, @ANYBLOB="2c6163636573733d616e799c6a1ba9422a4a5e24d2632c6163636573733d636c7f1e2250962ec003616368652c63616368657461673d2f6465762f766964656f3337002c63616368657461673d2c6c6f6f73652c657569643d", @ANYRESDEC=r4, @ANYBLOB=',obj_type=-,obj_user=:ppp1\'lo\x00,hash,\x00']) 04:20:25 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f00000002c0)=0x7fffffff, 0x4) fchdir(0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) write(r0, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1fffffd, 0x11, r0, 0x0) getresuid(&(0x7f0000000000), &(0x7f0000000080), &(0x7f0000000180)=0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) write$FUSE_ATTR(0xffffffffffffffff, &(0x7f0000000240)={0x78, 0xfffffffffffffffe, 0xfffffffffffffffa, {0x3a9, 0x7, 0x0, {0x3, 0x9, 0x10001, 0x0, 0x42a, 0x3, 0x3, 0x6, 0x4, 0x0, 0x80, r1, r2, 0x400, 0x6}}}, 0x78) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f00000003c0)={0x100004, &(0x7f00000001c0), 0x4, 0xffffffffffffffff, 0xd}) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:20:25 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) socket$inet6(0xa, 0x80000, 0x6) 04:20:25 executing program 4: openat$zero(0xffffffffffffff9c, 0x0, 0x20000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) pread64(0xffffffffffffffff, 0x0, 0x0, 0x0) fsync(0xffffffffffffffff) gettid() getsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, 0x0, 0x0) r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 04:20:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:25 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0x0, 0x5, 0x8, 0x101, 0x5d, 0x2, 0x8, {0x0, @in={{0x2, 0x4e24, @broadcast}}, 0xfffffffffffffffe, 0x0, 0x212f, 0x10000, 0x100000001}}, &(0x7f0000000000)=0xb0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={r3}, 0x8) 04:20:25 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x400000, 0x0) ioctl$KDGETLED(r1, 0x4b31, &(0x7f0000000080)) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000380)={{0x3, 0x5, 0x1a38, 0xfffffffffffffffe, '\x00', 0x3f}, 0x0, [0x8, 0x0, 0x5, 0x0, 0x2, 0x400, 0x100000000, 0x4, 0x8, 0x8, 0x1, 0x8, 0x2, 0xf33a, 0x1, 0x9, 0x8001, 0x5, 0x9, 0x7fffffff, 0x8, 0x2, 0xe0db, 0x5, 0xbe8, 0x2, 0x8, 0x6, 0x3, 0x5, 0x7, 0x487, 0x3, 0x3, 0x75b, 0x6, 0x800, 0x7, 0x479ad70c, 0x7, 0x283, 0x401, 0x9, 0x7493f9dd, 0x1, 0x6, 0x10001, 0x6, 0x1, 0x885c, 0x4, 0x5, 0x881b, 0xfffffffffffffffa, 0x7f, 0x2, 0x100000001, 0x83, 0x0, 0x1a35, 0xffffffff, 0x2000000, 0x1, 0x9, 0x1f, 0x907, 0x8, 0x401, 0x6, 0x4, 0x6, 0x401, 0x0, 0x10001, 0x3, 0x9, 0x0, 0xffff, 0x20, 0x20, 0xc9, 0xffffffffffff4112, 0x901, 0x7, 0x3f, 0x0, 0x9221, 0x6, 0x2998, 0x3, 0x58f, 0x6, 0x1, 0xd4, 0x35f1, 0x7, 0xa338, 0x3, 0xddad, 0xfff, 0x20, 0x9, 0x2, 0x7, 0x0, 0x7, 0x0, 0xce, 0xff, 0x18, 0xab, 0x80, 0x1, 0x2, 0x1f, 0x7, 0x5, 0x8, 0x7ff, 0xfffffffffffffffe, 0x0, 0x9, 0x200, 0x100000001, 0x8001, 0xd5, 0x0, 0x200]}) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)=0xffffffffffffffff) setxattr$security_selinux(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:initrc_var_run_t:s0\x00', 0x26, 0x0) perf_event_open(&(0x7f00000000c0)={0x3, 0x70, 0x20, 0x3, 0x2, 0x2, 0x0, 0xffffffff, 0x20, 0x8, 0x6, 0x0, 0x100000001, 0x9, 0x7ff, 0xffffffffffff6b02, 0x52, 0x1f, 0x900000000000, 0x8749, 0x247, 0x9, 0x0, 0x1ff, 0x401, 0x20, 0x3, 0x4, 0xfffffffffffffffb, 0x0, 0x8, 0x4, 0x4b, 0x6, 0x6, 0x8, 0xff, 0x4, 0x0, 0x5, 0x7, @perf_config_ext={0x401, 0x98f}, 0x400, 0x249a, 0x3, 0x7, 0x8, 0x81, 0xffffffff9f0c1be3}, 0x0, 0x7, r1, 0x0) ioctl$IMDELTIMER(r0, 0x80044941, &(0x7f0000000000)) 04:20:26 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x14, 0x0, 0x0) 04:20:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:26 executing program 3: r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000200)={{{@in=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@local}}, &(0x7f0000000100)=0xe8) lstat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x76, &(0x7f0000000140)=[0x0, 0xee00, r2, 0xffffffffffffffff, 0xee00, 0xee01]) fchown(r0, r1, r3) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r4, 0x80044941, &(0x7f0000000340)=0xffffffffffffffff) r5 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000300)='/selinux/checkreqprot\x00', 0x42000, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f0000000400)={{{@in=@multicast2}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f0000000500)=0xe8) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000000)=0x0) waitid(0x1, r6, &(0x7f0000000040), 0x2, 0x0) 04:20:26 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xee01, 0xee01]) r3 = getegid() r4 = getgid() fstat(r0, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getgid() bind$isdn(r0, &(0x7f0000000000)={0x22, 0x8000, 0x1, 0x3, 0x3}, 0x6) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000400)={0xaa, 0x30}) getresgid(&(0x7f0000000080), &(0x7f0000000200)=0x0, &(0x7f0000000240)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000280)={0x0, 0x0, 0x0}, &(0x7f00000002c0)=0xc) getgroups(0x7, &(0x7f0000000380)=[r2, r3, r4, r5, r6, r7, r8]) fchmodat(r0, &(0x7f0000000440)='./file0\x00', 0x0) r9 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) write(r9, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r9, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:20:26 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)=0x4) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x1, 0x0) write$tun(r1, &(0x7f0000000040)={@void, @val={0x0, 0x80, 0x800, 0x4, 0x400, 0x5}, @ipv6={0x400000000000, 0x6, "e66211", 0x14a, 0xff, 0x9, @dev={0xfe, 0x80, [], 0x25}, @mcast2, {[@fragment={0x29, 0x0, 0x3f, 0x7fff, 0x0, 0x401, 0x65}, @srh={0x73, 0x8, 0x4, 0x4, 0xa63, 0x40, 0x3, [@remote, @rand_addr="07197363269790f1205ff64e7a29e8ae", @ipv4={[], [], @dev={0xac, 0x14, 0x14, 0xf}}, @local]}], @dccp={{0x4e24, 0x4e22, 0x4, 0x1, 0x7, 0x0, 0x0, 0x1, 0x4f6, "22bf8c", 0x5, "e9507e"}, "4d3cd76c93daf9588f930cf0f94b7daffa1f5456c65a596bce5ba91acfcb8f3f60f685121a11ae8f88bd4daf5fa82195cb88f8e95c5bac7538f6a0d7e42dfcd1ac2d17b87830026564dadfa1fa613d5e32902d5b8ce07dac65024f290f4362eeeabb38f9b321d737a9b63b07c5f035c48f72ade430fd47a7d31c9ba5fd5c4af0e7f22ac1896369c420499c2042b0b1fe79a7c496a39db0954936d3265bb040baf2a89d3f1073648864616d11f0e9f0965aa51dfa49a6db4b839bcb6a9e2e15a09c2220738aa94faef7cd797f49ce2b74ad0d7ba602896004304be3d6250e4479481946e6d3a03cd93d97"}}}}, 0x17c) ioctl$TCSBRK(r1, 0x5409, 0xfffffffffffffffe) 04:20:26 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) fchdir(0xffffffffffffffff) r0 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) write(r0, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r0, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) [ 421.715821] device team0 entered promiscuous mode [ 421.720722] device team_slave_0 entered promiscuous mode [ 421.728299] device team_slave_1 entered promiscuous mode [ 421.740257] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.748949] device team0 left promiscuous mode [ 421.753657] device team_slave_0 left promiscuous mode [ 421.763663] device team_slave_1 left promiscuous mode [ 421.896972] device team0 entered promiscuous mode [ 421.902169] device team_slave_0 entered promiscuous mode [ 421.915257] device team_slave_1 entered promiscuous mode [ 421.922773] 8021q: adding VLAN 0 to HW filter on device team0 04:20:26 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x20100, 0x0) read(r0, &(0x7f00000000c0)=""/223, 0xdf) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/commit_pending_bools\x00', 0x1, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x21804a, 0x4) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f0000000340)=0x14) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f0000000440)=0x8, 0x4) ioctl$KVM_IRQ_LINE_STATUS(r0, 0xc008ae67, &(0x7f0000000040)={0xffff, 0xd012}) read(r0, &(0x7f0000000380)=""/128, 0x5d) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0x14c}}, 0x9, 0xfffffffffffffffb, 0x9, 0x0, 0x9}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x800, 0x4, 0x8000, 0xffffffffffff8f91, 0x800, 0x2, 0x2, 0x80000000000000, r2}, 0x20) 04:20:26 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000180)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0x4}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x4, 0x200, 0x8, 0x2, r2}, 0x10) write(r1, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000380)=r0, 0x4) timer_create(0x6, &(0x7f00000003c0)={0x0, 0x13, 0xfffffffffffffffc}, &(0x7f0000000400)=0x0) timer_settime(r3, 0x0, &(0x7f0000000280)={{0x77359400}, {0x77359400}}, &(0x7f00000002c0)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NETID(r0, &(0x7f00000004c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r4, 0x600, 0x70bd26, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4040040) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r1, 0x0) getsockopt$bt_BT_FLUSHABLE(r0, 0x112, 0x8, &(0x7f0000000500)=0x40, &(0x7f0000000540)=0x4) open(&(0x7f0000000000)='./file0\x00', 0x8040, 0x3) 04:20:26 executing program 3: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4c00, 0x0) ioctl$VIDIOC_DBG_G_REGISTER(r0, 0xc0385650, &(0x7f0000000080)={{0x6, @name="4a3e747dd3c806d14e252b1f27bce8998af285b2b70040d7885566111451bca5"}, 0x8, 0x101, 0x3}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044941, &(0x7f0000000340)) syz_mount_image$btrfs(&(0x7f00000000c0)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x5, 0x5, &(0x7f00000013c0)=[{&(0x7f0000000140)="c008892683675fc39eac9e081d60251876a0a54e687ba8c45d36186d76a192cedec54034c7ecefee4865f6c83d404b7988dae2a75dcd7772727bf3daa15a9f0ed823c1", 0x43, 0xaddc}, {&(0x7f0000000200)="cc1d1d179e26929aa71840e3916480547a1055c875929c97", 0x18, 0x4}, {&(0x7f0000000240)="d977177095e746c0cb829f37aff83c1970dffa03ed1016e625f38056dcce248a85bcc1cf0ac1ac5ae496e67f4fa80519228e755126434e3714dfceec2e36c73e21d8375bf796bfbd3434180ba17344e341a7a13fab2e2f0aea7b8e13fc0bb240a4932dc506f7f3bf7613f90df30eb2b6945467702114dcd630bfeb8d145fc1faec0eaa4c3857fe71923e0c5f1e50d8d0182726f7cd5b139af667d55b814c0ae4b863f7cc7d5539862b89f48e26a58764780d9a516d407c3296787a718a4dd0e5a7a4f733b8a5e12f28294e20d89351551dbdf8de", 0xd4, 0x7a}, {&(0x7f0000000380)="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", 0x1000, 0x4}, {&(0x7f0000001380)="96a6fd54e05873276ec180a26d80f33a4f8398af3082b89a4db1dd453fca6513d19bcf4456e91eb20105676e0377763dcc7efea1da92e3", 0x37, 0x81}], 0xc4008, &(0x7f0000001440)={[{@nodatacow='nodatacow'}], [{@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@fsname={'fsname', 0x3d, '/dev/v4l-subdev#\x00'}}]}) syz_open_dev$video4linux(&(0x7f0000001540)='/dev/v4l-subdev#\x00', 0x404, 0x80000) 04:20:26 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0x14c}}, 0x9, 0xfffffffffffffffb, 0x9, 0x0, 0x9}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x800, 0x4, 0x8000, 0xffffffffffff8f91, 0x800, 0x2, 0x2, 0x80000000000000, r2}, 0x20) 04:20:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x15, 0x0, 0x0) 04:20:36 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, r2, 0x400, 0x70bd28, 0x25dfdbff, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1f6}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x400c840) 04:20:36 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, @in6={{0xa, 0x4e21, 0x7, @local, 0x14c}}, 0x9, 0xfffffffffffffffb, 0x9, 0x0, 0x9}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x800, 0x4, 0x8000, 0xffffffffffff8f91, 0x800, 0x2, 0x2, 0x80000000000000, r2}, 0x20) 04:20:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x16, 0x0, 0x0) 04:20:36 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:36 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000080)) r1 = syz_open_dev$vcsn(&(0x7f0000000100)='/dev/vcs#\x00', 0x14c497a5, 0x210000) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f0000000380)={0x37, 0x5, 0x0, [{0x3, 0x10000, 0x80000000, 0x80000000, 0xffffffffffffffff, 0x1, 0x7f}, {0x7, 0x5, 0x7fffffff, 0x0, 0x200, 0x763, 0x88}, {0x7f, 0x5, 0x8, 0xfffffffffffffff7, 0x7, 0xfff, 0x1}, {0x6, 0x2, 0x800, 0x9, 0x2, 0x8, 0x100000000}, {0x4, 0x6, 0x5, 0x8, 0x8, 0x2, 0x7}]}) getresuid(&(0x7f00000005c0), &(0x7f0000000680)=0x0, &(0x7f0000000600)) r3 = getegid() lchown(&(0x7f0000000000)='./file0\x00', r2, r3) 04:20:36 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:20:37 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000080)=0x0) r2 = syz_open_procfs(r1, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f00000002c0)=0xe8) ioctl$SIOCX25SDTEFACILITIES(r2, 0x89eb, &(0x7f0000000980)={0xff, 0x100, 0x5, 0x8, 0x6, 0x22, 0x9, "a7b39f365b3e75e0af07c90c14d50774e918e1bd", "035225758fec37fd2d5fca03adbe34dea0203196"}) getresuid(&(0x7f0000000380), &(0x7f00000003c0)=0x0, &(0x7f0000000400)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f00000009c0)=[@in6={0xa, 0x4e23, 0x3f, @rand_addr="502ae88432cb818e10eb5ff12d9ea0e3", 0x7fffffff}], 0x1c) fstat(0xffffffffffffff9c, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r2, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f00000005c0)=0xc) getgroups(0x6, &(0x7f0000000700)=[r8, 0xffffffffffffffff, r6, 0xee00, 0xee01, 0xee00]) fstat(r0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f00000006c0), &(0x7f0000000940)=0x0, &(0x7f0000000740)) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000840)={0x0, 0x0, 0x0}, &(0x7f0000000880)=0xc) fsetxattr$system_posix_acl(r2, &(0x7f0000000180)='system.posix_acl_access\x00', &(0x7f00000008c0)={{}, {0x1, 0x2}, [{0x2, 0x2, r3}, {0x2, 0x1, r4}, {0x2, 0x1, r5}, {0x2, 0x5, r7}], {0x4, 0x4}, [{0x8, 0x2, r8}, {0x8, 0x5, r9}, {0x8, 0x4, r10}, {0x8, 0x3, r11}, {0x8, 0x4, r12}, {0x8, 0x3, r13}], {0x10, 0x7}, {0x20, 0x1}}, 0x74, 0x1) r14 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) write(r14, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r14, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:20:37 executing program 0: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x200, 0x0) timerfd_gettime(r0, &(0x7f0000000080)) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}}, {{@in=@local}, 0x0, @in=@multicast1}}, &(0x7f0000000080)=0xe8) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000280)={@mcast1, 0x3f, r1}) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x17, 0x0, 0x0) 04:20:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:47 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:20:47 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000000)=0xe8) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000280), &(0x7f00000002c0)) fchown(r0, r2, r3) fchdir(r1) r4 = memfd_create(&(0x7f0000000080)=':ppp1\'lo\x00', 0x0) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r4, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:20:47 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/avc/hash_stats\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffff9c, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x8}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0xfff}, &(0x7f0000000200)=0x8) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)=0xffffffffffffffff) removexattr(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="747270000015642e2f64657600004953444e74696d657200"]) 04:20:47 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}, &(0x7f0000000040)=0xc) get_robust_list(r1, &(0x7f0000000200)=&(0x7f0000000180)={&(0x7f00000000c0)={&(0x7f0000000080)}, 0x0, &(0x7f0000000140)={&(0x7f0000000100)}}, &(0x7f0000000240)=0x18) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x9, 0x10010, r0, 0x0) 04:20:47 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x18, 0x0, 0x0) 04:20:57 executing program 3: socket$xdp(0x2c, 0x3, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:20:57 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000200)={r1, 0xc, &(0x7f0000000080)={&(0x7f0000000000)=""/43, 0x2b, r4}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000240)=r5, 0x4) fgetxattr(r1, &(0x7f0000000280)=@known='trusted.overlay.redirect\x00', &(0x7f00000002c0)=""/52, 0x34) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000005c0)='./cgroup/syz0\x00', 0x1ff) uname(&(0x7f0000000480)=""/232) ioctl$VT_ACTIVATE(r3, 0x5606, 0xc20) 04:20:57 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) setsockopt$inet6_mreq(r1, 0x29, 0x15, &(0x7f00000002c0)={@dev={0xfe, 0x80, [], 0x1a}, r3}, 0x14) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) socketpair$unix(0x1, 0x802, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r4, 0x8912, 0x400200) perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) capget(&(0x7f0000000000)={0x20080522}, &(0x7f0000000040)) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) open(&(0x7f0000000040)='./file1\x00', 0x10c43, 0x2) 04:20:57 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x200000, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r1, 0xc08c5335, &(0x7f0000000040)={0x6, 0x6, 0x10000, 'queue0\x00', 0x59c}) 04:20:57 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x200000, 0x0) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000080)='team\x00') getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000000c0)={@remote, @empty, 0x0}, &(0x7f0000000100)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14, 0x80800) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000300)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000027c0)={{{@in=@initdev, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@remote}}, &(0x7f00000028c0)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000002900)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@mcast2}}, &(0x7f0000002a00)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002ac0)={{{@in6=@mcast1, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f0000002bc0)=0xe8) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000004280)={{{@in6, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000004380)=0xe8) accept$packet(0xffffffffffffffff, &(0x7f00000043c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000004400)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000004480)={@local, @empty, 0x0}, &(0x7f00000044c0)=0xc) accept4$packet(0xffffffffffffff9c, &(0x7f0000004500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000004540)=0x14, 0x80000) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004580)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in6=@local}}, &(0x7f0000004680)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000049c0)={'vcan0\x00', 0x0}) getpeername(r0, &(0x7f0000009bc0)=@hci={0x1f, 0x0}, &(0x7f0000009c40)=0x80) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000009d40)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000009d80)={'team0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f000000afc0)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f000000b0c0)={'gretap0\x00', 0x0}) getsockname$packet(0xffffffffffffffff, &(0x7f000000b100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000b140)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f000000b5c0)={@remote, @multicast2, 0x0}, &(0x7f000000b600)=0xc) getpeername$packet(0xffffffffffffff9c, &(0x7f000000b680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f000000b6c0)=0x14) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f000000b740)={{{@in=@loopback, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast1}}, &(0x7f000000b840)=0xe8) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f000000b880)={@local, 0x0}, &(0x7f000000b8c0)=0x14) recvmmsg(0xffffffffffffffff, &(0x7f000000df80)=[{{&(0x7f000000b940)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, 0x80, &(0x7f000000bd40)=[{&(0x7f000000b9c0)=""/29, 0x1d}, {&(0x7f000000ba00)=""/55, 0x37}, {&(0x7f000000ba40)=""/79, 0x4f}, {&(0x7f000000bac0)=""/109, 0x6d}, {&(0x7f000000bb40)=""/76, 0x4c}, {&(0x7f000000bbc0)=""/248, 0xf8}, {&(0x7f000000bcc0)=""/123, 0x7b}], 0x7, &(0x7f000000bdc0)=""/104, 0x68}, 0x7fffffff}, {{&(0x7f000000be40)=@llc, 0x80, &(0x7f000000c100)=[{&(0x7f000000bec0)=""/242, 0xf2}, {&(0x7f000000bfc0)=""/161, 0xa1}, {&(0x7f000000c080)=""/86, 0x56}], 0x3, &(0x7f000000c140)=""/193, 0xc1}, 0x7}, {{0x0, 0x0, &(0x7f000000c380)=[{&(0x7f000000c240)=""/121, 0x79}, {&(0x7f000000c2c0)=""/124, 0x7c}, {&(0x7f000000c340)=""/55, 0x37}], 0x3, &(0x7f000000c3c0)=""/193, 0xc1}, 0x8}, {{&(0x7f000000c4c0)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f000000c600)=[{&(0x7f000000c540)=""/79, 0x4f}, {&(0x7f000000c5c0)=""/2, 0x2}], 0x2, &(0x7f000000c640)=""/93, 0x5d}}, {{0x0, 0x0, &(0x7f000000c880)=[{&(0x7f000000c6c0)=""/222, 0xde}, {&(0x7f000000c7c0)=""/153, 0x99}], 0x2, &(0x7f000000c8c0)=""/129, 0x81}, 0x2}, {{&(0x7f000000c980)=@can, 0x80, &(0x7f000000dd80)=[{&(0x7f000000ca00)=""/61, 0x3d}, {&(0x7f000000ca40)=""/252, 0xfc}, {&(0x7f000000cb40)=""/4096, 0x1000}, {&(0x7f000000db40)=""/83, 0x53}, {&(0x7f000000dbc0)=""/212, 0xd4}, {&(0x7f000000dcc0)=""/27, 0x1b}, {&(0x7f000000dd00)=""/92, 0x5c}], 0x7}, 0x5}, {{0x0, 0x0, &(0x7f000000df40)=[{&(0x7f000000de00)=""/251, 0xfb}, {&(0x7f000000df00)=""/6, 0x6}], 0x2}, 0x2}], 0x7, 0x40000000, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f000000e700)={{{@in, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@loopback}}, &(0x7f000000e800)=0xe8) accept$packet(0xffffffffffffff9c, &(0x7f000000e840)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f000000e880)=0x14) getsockname$packet(0xffffffffffffff9c, &(0x7f000000e8c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f000000e900)=0x14) sendmsg$TEAM_CMD_OPTIONS_SET(r1, &(0x7f000000f540)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f000000f500)={&(0x7f0000000380)=ANY=[@ANYBLOB="a40b0000", @ANYRES16=r2, @ANYBLOB="00002bbd7000fedbdf250100000008000100", @ANYRES32=r3, @ANYBLOB="500002004c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000008000100", @ANYRES32=r4, @ANYBLOB="b40002003c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000000c0004002c008000030000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r5, @ANYBLOB="3c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="1c02020040000100240001006d6f64650000000000000000000000000000000000000000000000000000000008000300050000001000040062726f61646361737400000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r8, @ANYBLOB="08000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004007f000000080007000000000008000100", @ANYRES32=r11, @ANYBLOB="bc000200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000008000008000600", @ANYRES32=r12, @ANYBLOB="40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b00000008000400b3a00000080007000000000038000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000008000100", @ANYRES32=r13, @ANYBLOB="2c0102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r14, @ANYBLOB="400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400fbffffff08000600", @ANYRES32=r15, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000300000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400030000003c00010024000100656e61626c65640000000000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16, @ANYBLOB="1e00010023fd65544c67de8c40453ca7473c6b8421e11c", @ANYRES32=r17, @ANYBLOB="a800020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004009377783f6c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000003c00040001000708020000000000080507000000a7db0820fb6efffff9ff01ff060000006a0003010200000000000685070000000500ff08be00000008000100", @ANYRES32=r18, @ANYBLOB="7402020040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040001000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000200000008000600", @ANYRES32=r19, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000080000008000600", @ANYRES32=r20, @ANYBLOB="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", @ANYRES32=r21, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400f7ffffff08000100", @ANYRES32=r22, @ANYBLOB="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", @ANYRES32=r23, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r24, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f696e74657276616e00000000000000000000000800030003000000080004000002000008000100", @ANYRES32=r25, @ANYBLOB="8c01020038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400fdffffff400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000100000008000600", @ANYRES32=r26, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r27, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e740000000000000000000000000000080003000300000008000400010100005c000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000002c0004000600060b720000000600050727000000b000053f001000001000ffac010000000002bc0009000000400001002400010071756575655f696400000000000000000000e5ffffffffffffff00000000000008000300030000000800040047f4ffff08000600", @ANYRES32=r28], 0xba4}, 0x1, 0x0, 0x0, 0x84}, 0x4) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:20:57 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) prctl$PR_GET_FP_MODE(0x2e) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x8400, 0x10) ioctl$BLKRAGET(r1, 0x1263, &(0x7f0000000100)) r2 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x2, 0x2) ioctl$KVM_PPC_ALLOCATE_HTAB(r2, 0xc004aea7, &(0x7f0000000040)=0x8) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f00000000c0)=0x1) 04:20:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x19, 0x0, 0x0) 04:20:58 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000640)='/dev/video37\x00', 0x2, 0x0) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0) r3 = syz_open_procfs(r2, &(0x7f0000000980)='oom_score\x00') fchdir(r3) r4 = memfd_create(&(0x7f00000000c0)=':ppp1\'lo\x00', 0x0) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r4, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:21:07 executing program 0: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000180)=@l2, &(0x7f0000000200)=0x80, 0x80000) write$binfmt_script(r0, &(0x7f0000000380)={'#! ', './file0', [], 0xa, "b1d9c79d9e55186a5119f90f091cdcb308af20bb049f166836e2c347da6362991e64be8d41fb3408ef8bf89df95f77e6f8a501c996824e8e57f2bcaa47658fa0801b58e678cfaf812a10da09cc02a35569aa3c10438069ae658853823c3d971bc921439da86a2dec8c32436a7383c7613fb9904b0e230213f8020b4cf4f6ad0cd0046f9cb1448f25f7ca110d8ee0f6136a9f9efee473954f19e88f05a50bb5a6df21f441"}, 0xaf) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000240)=""/88, &(0x7f00000002c0)=0x58) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0xff, 0x30, 0x7ff, 0x8}, &(0x7f0000000140)=0x18) flock(r1, 0x0) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000180)={0x2, 0x6, 0x208, 0x0, 0xfffffffffffffff8, 0xbf, 0x7f, 0x9, r2}, &(0x7f00000001c0)=0x20) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) 04:21:07 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:07 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1a, 0x0, 0x0) 04:21:07 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:07 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000180)=0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") syz_emit_ethernet(0x32, &(0x7f0000017f07)={@broadcast, @link_local, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x33, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}, @loopback}, @gre={{0x0, 0x0, 0x1, 0x0, 0xb, 0x0, 0x0, 0x4}}}}}}, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000580)='vd\x00\xe8\xedB,x}\xdc1=\n3B\xb4i\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xc8\x93h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/\x14`\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp4Bx\\\x89\r\xe1\x93\xf5\n\x8b\x16J\x02u\xe5I_\xd1\x1d\xc9\xde=\x19\xdd#V\x01\x1b\xa6V\x8dL\xf7\xd6;\xc9\x8bT\x9a\xad2\xfb\xe4\xe0\xc0\x1f\xddS)(\xf1\x8e.\xb7\x90!\x03\xf4\xa1\xc9\x94E\xa4-/\x12J\xc4\xe5\xc5\xdc\f\xfc@\vPG\'\xf5\xac6') fchdir(r3) r4 = memfd_create(&(0x7f0000000080)='/dev/video37\x00', 0x2) name_to_handle_at(r3, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x61, 0x9, "789780a0d821d77c0b33056b0d56bc69c7db15b395210c2a3372ea406fd25d2507f99355ae9f785d187899a0feca405a0a489b4a8739b7aa95456612d5477c047f0fd35220e7e35621c6c9a4ed018f3b462c2174db7f49be80"}, &(0x7f0000000140), 0x1000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r3, 0x28, 0x0, &(0x7f00000004c0)=0xd83, 0x8) write(r4, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000740)={r0, r3, 0x0, 0xa, &(0x7f0000000700)='keyring5(\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000780)={r0, r3, 0x0, 0x14, &(0x7f00000006c0)='.*)vmnet0]${vboxnet1', r6}, 0x30) getsockopt$inet_sctp6_SCTP_INITMSG(r3, 0x84, 0x2, 0x0, &(0x7f0000000680)) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f0000000200)={@mcast1, @dev={0xfe, 0x80, [], 0x14}, @ipv4={[], [], @multicast2}, 0x1000, 0x89, 0x6, 0x100, 0x6b, 0x2, r5}) vmsplice(r3, &(0x7f0000000480)=[{&(0x7f00000001c0)="5448949ce5a452659856dbda660e7a41f3dd6d774e70be468a58d6f9066778e9702aa2b19f5498c95227f72ab15f869abafb67de248fb7eb904ccaf7cc4a82", 0x3f}, {&(0x7f0000000380)="ea72799e89b4d38160cdbb39dcb49734547d36c6f7641acba35cb7972740f9fe1df41fc199350b19a88baa0e6b905676daa9a65773bdbda8e4e5327547fd4cb96e7966d17d7b644c8bde3c46b3785d6a6234791ff436406c4810fc344f4a5397492fd4ef65c2f5f0647cb55057d950045a9850d90c1c069984a5a3ac80dda3986e7fe194de7edd83680654f1d1eb5fcc053b0daa51a1f822652593020ab72e3ceb30604cb289acdac7fa44181c94bf90ee40d26d13570a8c05fb6c6e60e65f975d1592737a4ae29d6d44de534cd3", 0xce}], 0x2, 0x1) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f0000000500)) set_tid_address(&(0x7f0000000540)) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r4, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:21:07 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1b, 0x0, 0x0) 04:21:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:17 executing program 2: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0) ioprio_get$pid(0x2, r2) 04:21:17 executing program 3: r0 = accept4(0xffffffffffffff9c, &(0x7f0000000000)=@ipx, &(0x7f0000000080)=0x80, 0x80800) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f00000000c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000140)='/dev/swradio#\x00', 0x1, 0x2) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000180)=0x1a) ioctl$IMADDTIMER(r1, 0x80044941, &(0x7f0000000100)=0xffffffffffffffff) 04:21:17 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:17 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:27 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:27 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$DRM_IOCTL_ADD_CTX(r0, 0xc0086420, &(0x7f0000000100)={0x0}) ioctl$DRM_IOCTL_GET_CTX(r1, 0xc0086423, &(0x7f0000000140)={r2, 0x3}) 04:21:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1c, 0x0, 0x0) 04:21:28 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000000)=0x4) 04:21:28 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:28 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:38 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x0, 0x20000) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{0x8001, 0x101}, {0xffff, 0x4ed}, 0x10001, 0x0, 0x101}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000140)={r1, 0x50, &(0x7f00000000c0)}, 0x10) 04:21:38 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:38 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1d, 0x0, 0x0) 04:21:38 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x0, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x28, &(0x7f0000000080)={@broadcast, @multicast2, @rand_addr=0x3}, 0xc) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044941, &(0x7f0000000000)) 04:21:38 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:38 executing program 2: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0xd4, "a591cc1f868e1e2ff6289e0c0c4a6e7f8051f404867e1cd4b1ffc096244e22945ec64a904a301e0ecb0996486afdc51235e314b8b16348effe88065369cfd495edc7e00936e64b1d57d8ca8d192147280bb4be36119a0c445217545f63ba9fb194ca547dd61fd23e8e4c70934cc17818748da397ae121bfaf7207a55f71ad11f5320cf1a5bdb2359be103f0882846ab1e41bb2b57542e3f23384ef33a4e23a6fcd89726246212e7cc54ac37783ae1c223e039ca6df6e2dc539e1b7ec7ab7e744388b35130ad4b376bead51e5f499027ab90b4bbb"}, &(0x7f0000000080)=0xdc) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000001b00)={0x0, 0x5}, &(0x7f0000001b40)=0x8) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000002f80)={0x0, @in6={{0xa, 0x4e23, 0xe1c, @dev={0xfe, 0x80, [], 0x28}, 0x40000}}}, &(0x7f0000003040)=0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000030c0)={0x0, 0x2c, &(0x7f0000003080)=[@in6={0xa, 0x4e21, 0x46, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x2}, @in={0x2, 0x4e22, @broadcast}]}, &(0x7f0000003100)=0x10) sendmmsg$inet_sctp(r1, &(0x7f0000004700)=[{&(0x7f0000000000)=@in6={0xa, 0x4e23, 0x7fff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x4}, 0x1c, &(0x7f0000001940)=[{&(0x7f0000000180)="f6ebbe5c54bea9ad21f319f3de8c6bef2f18947a29c21503e17ed8fa8f831243354c604e324297038f943faee4be4e97b6897217c31ac5c5a59b4b57897676abc1a7a362a108cee8da6324678981cbb20481eb8766009c2b460ad7af6ab0e21a72143b6001bbd530412e5eb5580ad3dc026193b78d99534d429795768562c252511864fbfc457eb5643f0cd62ae44a8dfc0335d43b65096271e7b9cc766994ba5f563df39484a39f8460bae8f81cb25a1c93452defa4b2ebbdf968932f7c3d281d", 0xc1}, {&(0x7f0000000380)="b45feb7bfa9717ca44d0e5048c167f86ac02767cb4d2958f5c9a8a4a9a1136135025f3d8b233ec3dcafa9baea59e0703e9f40d4929a8099ef91f890da20097f269098eb59dc365aeacb0ccabb2ea948cb55bdb23afd004cd54b9fc7c5fc325bc85f11e38ca89467349b614788a4986a020bdab2c3d2ebe2b8e5015da82aff2a721b33fc974e735608a6fc3bb11ab3fa5636a458f8c864464190b377e75012f4850de03debd8e21fd574cb1b65bcd103c8abd3a6c3aa1c8c86ba691885fb462b98ceec139484247bbe9d58b1a1da79e663060793e2d4becea096d69eae4a5eb58", 0xe0}, {&(0x7f00000005c0)="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", 0x1000}, {&(0x7f0000000480)="efe0f54a5a460da30149da19bc336252fd1597281e34571eef30650d0409393a355551e180b3d9ab7b5ce7edab9165978a181029197b1525c037e9a9015411e440689c1aa6a0b9629e4ca6849f229dbcd52ffa6974f7ff0ccb571d7928a70ad4157d6a34265de47eb0aa988f0e4364f2e08199b49a9faa08a4d99d364f93c64663708a2185947da6c4b3d98783fa361f1401aadfeda5b0de19c21520fe46d8d618eee706710be500690cffaf7101ee88ed154fee41f80b2042ce5c1a73c79c4f76c3bc065d5e90fe2b07ce4691b0c4a814293e779b49556d401f9317cd39b31dea8996998ceaad80c4d89eed067ead511013fa", 0xf3}, {&(0x7f0000000280)="b65bd2e352889e87dbd99c90d602ed37191b1b25adb09dedec824363b9aeb491e3347248587152971fe020857c96ce1da82ec61025a3994f688a9df55103bf8374a23542a28874400b51f761ccaddd9080baefe19994af96eb5329ae93e19530ec64", 0x62}, {&(0x7f00000015c0)="7afb2c88866b9308b200b0457c9cbae425106bbef168f3fee8f53638be0cb26b9f8b3312227856552c3efcbd3067445d65b9c61c9dd7c9283733eacac27f434a2e06206beb9c5c1a59e0ecfc458af1d8da9f1cd9b5744eb0b5c987513b67c988fb06ec52ef7806647d970ab684658c66fd4a2b26a900ca8689c9098f7c626d30ee8e02462bca336b25b95e1daf4f0d0a65cb78ac38639dfb991814cacbe1b1e2cdd0bc6ce3f25dfbb422b776", 0xac}, {&(0x7f0000001680)="9f6cbbd7871edecddbf14852a5b63ba0b97a6c8b0758f2934528d3a3fb4e09938c92efd07bec997d10509075156b7b693cf302af5bbe77759b2cfb67115ea767ddab2ff77c684f0a228058c12fce1a8cad0c65d18adb331ff8ee28a3d4edaea62369ae5e7e859b02bc27e757ce34ad01c7e82e49a5f447bad57f9bcfe2b31bf49f1730f0cb9c3a88806fa853227d6750ed5eb9cbab5d0574e3ced7ec4d690e25c8e950a4dc401a96c58e51dff9c79da86b0182aaf1ee33df83d613ae0501e6ff58963e6adf327111bafe1c41125b5e02c3b691117289198bec0b1e46af532f3bf4b4e9c4215b2d741258cb693c3671642d09ab", 0xf3}, {&(0x7f0000001780)="274aa36da4fd1434d7e06053cfbf455af8414b3cad2ed7b965f50e12335726fee29bd43850d851d1be0ae74a2b30341c82300be17129103c6e9cab5acca2ee667630169d3a3ef5da441a574271af006bd17163e78eb2c3e342f9ef7c330ad119f9250c0fb871dc4af3c73d4af95254ce3eecceac7f0bd7463606187500ce3f9f0b18998a458f869545d3a4613897d443e998be9402107218f5be7d13573c42c2fd06365d00280e115e00e59df5a51ed50b985678ffc4511972bba0c315d82a47d42349c63f", 0xc5}, {&(0x7f0000001880)="8181ce7b6c419b5ae231c7790d4b6c12b3529ee3ca508c5789c73ef8fbda71799fbb677c7dadae4a5342c21ff6e8082e97796afbd454b0bdb747cef344c7afc7284a3ecd26855ac413d8ff6df4f6397bfd60dc674021aebe605dbfe24763b23d45cbf2583e5a0127c969249d42e054b33eeff9754d725cfe4fed56c43f8ed85f49790277d379db510371c92fb10409d68b26e728ff", 0x95}], 0x9, &(0x7f0000001b80)=[@dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x100000000}}, @sndrcv={0x30, 0x84, 0x1, {0x8, 0xffffffffffffff96, 0x9, 0x3270a109, 0x0, 0x630, 0x7fffffff, 0x8, r3}}, @authinfo={0x18, 0x84, 0x6, {0x3e3}}, @dstaddrv6={0x20, 0x84, 0x8, @rand_addr="6d6586cb60b7c97d861c65ab35e23108"}, @init={0x18, 0x84, 0x0, {0x1, 0xfffffffffffffff9, 0x5, 0x8000}}, @sndrcv={0x30, 0x84, 0x1, {0x7, 0x3, 0x8008, 0x1, 0xff, 0xffffffffffffffff, 0x7fffffff, 0x81, r4}}], 0xe8, 0x4000000}, {&(0x7f0000001c80)=@in6={0xa, 0x4e20, 0x982, @rand_addr="fd174c15af115e5d5ec4d2f4237993c9", 0x6}, 0x1c, &(0x7f0000002f00)=[{&(0x7f0000001cc0)="10ce3e0fb802147257bf6b10bc5d880cab731939c16b5e77dde70d1357b595d35ecca784ff3218fb375e75d56b2bec21cbfe592f7936ea2d85d041568be9dd43ee950244a93376e752db9b14d464674136419353bad8950299e8f5f6513866b30379433e33f303a2827470584f4882666ed61c4845e035086c1ace31a415a4c0004280feefdf8687e5a3d2636aa872cbc065037ec316e905c8f5e4a10b58b51bcf937919a357e08cd472ce2f919d2813659633842c06480aaf4353650081e4d4f5aa9fe152a1d83a5085470e1beabaa6a293a2", 0xd3}, {&(0x7f0000001dc0)="eae40fa3418d49c8e2d487c7af307295b0a8250a54a584650483cdc3e6fa998e47b7f21bd393cbe50f5d1e5bf743450ef19043fa38cd622382386a59383bd4cb37f7870f71ce58ac5c1013fedce80d56582557e61df35f740d6d9debe5c8cc283dccba6e6f0fe1b07d03752b6114ce2acbb58102a76128c9782ab382e1c3bcc2a8048be98aae2fce5b88bc8c38ae25da2cb6d2b344d019abf777f30bfbc8a8e4d81e5437e9b33c427c0656a27afe83b5adbe7bcf60ef6020daef8377c52e1a121d8a238c83409030e15383addfba65084f753adc00b8558116636cb488131b1d10ecd78f7f365c44cd0f36388ea15d362375821ca9d9306138ad527cc7058c87830a43843eea77111ef9c2f958da38cc3612a22b1094f909c094e7f5174be74f834e5fff3a93a67fdfee73a819ec975cdc06f6b5cdd91dbf01f763f8671c60a7425b6e2715c78d07c69314a503dccf6d2156735a5c254113b4515797659ef424af43f36e4d5402b9a3c4474d16f48f32255519cf1e816d3f0e42d56a4edba7982334a21f47bc17579d88f8f2919ac6d034ffc4f6fa460cb8db06fbd6c5fa198351099ddfc79c86ae7f55439a90fbfac1e00f7cc90d55de28634705afd1f3346de2328fbc25ebd83d64c98586bc6f6291fa7065bea057a4f871179516009a93fb0ae95e30d252f0bb3519dcb0f3bc061ebf926147e8cf7fdfab3ce65281d481933f9090504e4deed52138efd37ab7e4130e69ad15e7a892e9dddf5fc6771bf122d1fe0886cd1bedae258f28600ebaa3c8db58c12e2ecb31cf934585a62c46f3df668c4a491acd5a0194f6a203d9b9be39e193e0b53631b248ad6927b688be13ba5231fab4e7a6ed24e73b1906c8d834a4ccd44e4713d2ba063c70872d48af83d6e91771ec63ea667d9d2d9eccad94e99928672edaeda9e0998f07e2312d6666fdc8bb0f35c452f269c8ee05d8bed35072a8a8f0bbd32610941c1d4129635c23378d9b7eecd8ef065c2bd87266c3a01d00226435361d4eb55168184b664a79310b96855aef6cd02600802ea4cec42675bfb2dd9da300ecfde7322825d8789ba1df3d14ca4bfa2411fbe601df605004892f52ba5ff13fae6ec9c4a5b0b50194ca029d32f5315578d8743c608c3f81dd2441970cda083e229c03129243b17329d8b3b4b3e740658b10fedec97d14488a7d1655e9a9f3234a2f93afe7736a086541424324171ea0ad43d14170628091c18b49ccf45c0a49e1b0adb9ce303052b027b8f32cd388dbb95299f5b018a11adf0b60dddfcc3ec680a96775012505e90d3c2cf4968f44a27bb0a72da3ade60dfcd488543b156b5a0665a6ba1f866b76b2f8ffb69b163d10d5dfb459646a571ef38e488da66b9c6d462e149f0042c1426a384134c5847cf335a652d9600add01104a650a5a7b5436788802077b046ac8dea9c6c84fbc643f879b7d3c76c3b5d3725c81eeb9ded7a0d94c7442ebb1b15485716c62e17685dc18ecd3924a2b6d246426c47202f09688fa704a8cd1778dd914d92f2af63cad5a2eddd21dee43366d7a48974615fbcf10e46abc3bc51cfee8c91ebca6e539f740112050cc9fbaed21ed7950abf13affc7339620b0a137da9b83e35c48d57b29263690d63ce22f3febf5780310b45b01540d88e5de7a5745e80dbf72ec2729e70c21823e5e1704febfa7471dbfd54cc57654c35e10555a35a521b726b94ef0fd12482b4de2d4264e44aa57c5d404e32a10cadc1c25e191b206a1c97860fe93ce86d4c3cc423dcdf0552c0460a8639f7126d4cf355abc923743670e13211a9040a729e151f10c53c33d1951526fb90b908a501cb79a7e9f2711f6aaea1d6ca5b6c7a636774db4527451718594d0981894d3926954ebdeb076e7556fbc49cdf25d66affaf078309f3bb34fd48b0cc7993d99581610fa43c7bbd20e5985ac1160f6f321df50be1a256c0272f9707706d778a6afdbe5f57d54bc82ebef1682a1229077a0a7d3803ce0b9b7c0c47b6923ddb94bc33aa2688093a369c3a92db7f7f5c18c650c67af5c8f9fcf6624155b951a4c323bb43225d2810d6400ea8b42d7f4ed73b92505cf72d5ecf6306b831b155939dfc3f6e51c120478ff6b624af2a78dbfe46264d1cd3d82ab921201a7582d3c5a4f303c38cd6842b7fe9258f9f737a842ecd67bfdd907a2a03417ef624e3786ea470dcf9c717778ca75361907ee85f61b666a04751b05d5bd1aa03f3890880913fdf5bbd678907694df8ab3ba5a54150cc979e443b5f6bbb18732bb7a17c52128d6efb2016c7d9a671a5d159ddbc92cd8c534d65386bef89a2e2e90483f8ae901d04096223c6fcb79f274de5b52ed8bb49193826e2f21ea7920a8af62197337ab8ae7ea33a5f7c9bace91efef71a6d038e829955891abb7011eb15aef42b2c705a6f721472ccb5b7869ee23cbfb958d5b5e528c80d1e0bfa3fade51957c7dd6bb210adad6a6064c7170da8db359963f7f6f6f9933c74c52f06e776f73ff4da9e1cc6d47434c25836bb95285eece8114487bd16e9b50d266025f45b018ce44fd1e97af348c52343d47c1eb3ea8b13e349833735ab17097c6bc74cdfbed0bd2b007e542862956adb8dc5fe419a03624568fe7c0c1fe144680ccc1e3eb5b1dfac63be098af3eff482eff199545dc94a706c851b840a30ebf40d8816baf8456e659b628e1ec71d125e60a91d918adb5e441b0a807b8e3d78ee41deb7709aff36b825e46fbe86e4cdf98d2cf8f65f92f0bd19e5b85d8636445337d09a21cfbb70ae36991fe3a909b5867890f78370700a3a9bb278547e06252385dea625e9ad1d20e340b393782fd269c428eeaf4d4369f0d4d5bc8dd5a1286c004313555f6d737508b42a91201b45befbcb318a4266af50f3647d9d4f79fdcc553d1dd67e183e8ce46843004946dd1dfcb0249d0f2efc23270d8bdb503ff282134772c6f5abe0b77135b295876c47510c528d717ed949891946949145467d9594aee618b71cd737fa6c023f98f6657fd7f5e19dde392c53cb2115c958846a2e8631708f893141a924ed62154b11a8689b60e9a739d0a4d01c0202d570876a6e300abd111a935bef83ea564dd30744d23c3a79e31630309774bd82a3f9e6508911f048b097dbe5133a78d0d8744e0fead4eda1e3ff7c5e3e3a89e6852c14e94f396b8a0c17691e9a479fcbda8834f2ecc2ad2c9beb1885c869fc78ea766a4e8a0bdeb3e4c0d486e4a983546fc8352dc418e952124c79ca77039b5d801a3ad6b5c0e6d0e07e7d932fbb52d682001c2fa542e41f4a8627610442c9910b1d5742d74daa954de4d6fc67e537ab2935b0a4c99910f05e0c9f1fd8be783f45d20c217657f3d974a173b3e7a5e01b18c6179eb45129c744f59f3e2bcfb772ebf4961cd595cc40e32ab278fe4d36246e8e8bd83e9aa4f55b1aad248b3c5c130d3c549e143fe830a877f70ba54e703a757adb52e8242e5c47148ce8c4edfff6762f176f519e4a792fa4f5dc94458e487683ee69307aab549689e24c51a8460ceb0950320d72eba89a395de1f9a0b8a8ad923e6349e856fd14d765bd2994c80b4a17f12344bb7a2dc78b21c0abbcc9baffcf4463cba6f4c50377c19190ca51d0da961c886594b31b21ddcd180110238ef689dfc14f56b87a515088a82ee223b75498254fa583f919f8e7a3484444f66d092affc116f03c49e2915ec7d13da1c580da6e2cb51cbc665fcb7004188ce9096f6117bb2d31897e1bdb50c4a74c137d6a82c3d3f3e16f00456d342c129402b7bc32c1b40995ca59501226e5a00bc91174ae810deb861d6beb06fb54a5c0eef1aa7983b59a66bd69bf81c17014fbe3118fcbf870f7971a470353fbb4d320e03f8f7c849737477fe84758c159a7c56b47a10aee1cff61fb3aedd7cb8b613f0a6b480cb1c8dd6e6c82d27aee2e0dfbb39e19250c9ca354956817a833553113fb05ee415cc35f8f256d4407bbb945693f7da4e62fcd85cbffb56cef6cd4cc09ab2a451896075d5346a70aae2bfb429b06a8ab0b731f0aaad0c481ba6f22efceae0e3f999b020252b08505117d6bb240cdd0e3736989cce5a4111ac71833615482018db5f822459e7eceb2c985f707a3ea6923aa37dd7c141269ec997e80700a12a58d86b27926d7f0b9966cce386eec250dd513859901b42b083e270e8ecad7b6e24735534aa70c767b688a16c4031e0034c3b6aafa0d9e30221b2345a9260516fbe7976aacc2216e5f3ca28217749aa3dc2425895a2d0398630309d1cf96ede9d9d63cd32cb7945756458b0c46b7cd521797acaac5f8b5af04fac976937c7e262908f487f4c0d1a0dc7c94910833310a713505b0be61aa08550239e45ffed3b1b5f1834f50483120963f4f2bbe7d12069633a55aa37a38fbe0d0689015ac0b33a43ad97ecd0761a7e59bf76798c7b7c9e81620bcdfcd8c70780026d219287bfbcda027e73530c1bab788dc58a8fdc3355c97aa4e6dc6f8b9909c7fe197072b22d0e2f36b8724348e63ba75319d7293b1673db2c657fd1ff1f9a139b5128d55493e38d4e49c893dfe1d999ceeefcc6c9d47bca55208676362c636d88e2f50ec276fa5eb61c82b970c5c0d7be7fce54982718eab7b5e8e3121a3cc60dea4ab8752600ef5e992efe75ce87539ef71db5fff6e78674aceb2c4f0425d30dfa217a6cf0c811b52353ca62f5e96bc499b8f5f9fa5f4f1757f8bdb18b43078597429136099edb99cf7f5d1824fadd3838c156a1b62b0ef903ec2436c0e6dfada9cfd777d5e92e56e2801d6cbde5bbe969e015f995cd9376622119cc9cf9ddf4c98acb2cdb83972e41c5ee2e9c48fcbd0278257e990a3cff57cf120772796f5a124b2a8fd7a753da19bb10d9fb44ec87b34220dc3cdec6602762204f9101e2998215c10a1e0f0c8b4d8aabd95070b1e9567634b362ca1925eb1823d5f08d4b1c050345e7e2b0db4d7a7a6d632259fcccf85d34b454b09ddb8edec4e00f8e57bfc57f6f7ef00083114a2368efab8109aa93d80d0952783948eeb471aff9b1f83b8ba59824246a3cbb1f1db294068cc6404e2c027db82b32c156fc36cd83a71dc557fa0964b774d5fae37a0fa3a5556c28fde0edcff94cf7713b9fb9e4495598fa32a6a0f33f19f941c57d31999b1897a41825a4f9f150b3dbb66eda0ebb697d242031c2778a241512c26f3c27946543ed77fd9b733f2bdfa2145b65747ebfe642bdefb340deb23f3104dae11b6a666c2b42e36c93f212fcfd11bd4bcfe602cdede174f65b20ea75b2309d7d9fa950775b25fe92608b801ada882552b25a52ded37cde35f18d65498c78f733ce4e7d52d5ace2369bb15c54c12ae905076dea57153d6b1061c383e7554dd126aa1cb6e27196efba85f2cb2ce9911b228789be1c5ad3692da0ece0c68211829352899280e638516f6da0eebf5d419554dff77314a9365cee787716e24f440f6dfc8d5a659c93ab92317da22c8ae2c78c2adf6c625673b55513d0e8aa90a03a14876b9cf39017e7a697dbc68da62cf1cc36be6e2692c6939195c10306d72e81d0d0f8272e17dd152abdd6da3b6d0b8021c76b9bebda300934a5121bc5ae2272738a6f5cf81e031491696cedac421e2811a2024a1415fa1a5b427d2169de7e2f2908b4a2eb36cdf66d8b28b460d8d44a6a1999864441e6f12a6ee423af5c9f7753eefb5610e04ba15dcffbc965a05c8bffa548bdd86521d6710e4204366e7d3bc2014b59710b585e484c4089e30eb86d21b8abfe50648658f9d895ff5779743cf572f73ba873", 0x1000}, {&(0x7f0000002dc0)="906b0605b19a345884e0d4af86ea7d39511d7b3c3ad7aef97638f3400d", 0x1d}, {&(0x7f0000002e00)="422915f2702e08ef7c8be51a2b1b032a82", 0x11}, {&(0x7f0000002e40)="76ad4ab638abe817f62f80bea88c0931994511ea0e3963d87e35b00cca011881acc3de86d2c285af75bec8114ac0f4c45cd4654e547715ec8511e77ae131acd41fe71b23c61dd7c4e8ba1dd82df1098d014edb57bddf07562bc5a407d182652e71bf4fc1acbb99ee2d3b9f134d9231fc1f4d583ee57232c70b67906ef8b03dc723471072fe7fdc73bc3e81656a9ac3c6c4b705ebd2aee198cecffee23c813afb6a7b3ea76a0cb4e81a498d6a64213e01482bc80a", 0xb4}], 0x5, &(0x7f0000003140)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x6}}, @dstaddrv6={0x20, 0x84, 0x8, @mcast1}, @sndinfo={0x20, 0x84, 0x2, {0x8, 0x820a, 0x9, 0xbb3, r5}}, @dstaddrv4={0x18, 0x84, 0x7, @rand_addr=0xfffffffffffff001}, @authinfo={0x18, 0x84, 0x6, {0x5}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}, @dstaddrv6={0x20, 0x84, 0x8, @mcast2}, @sndrcv={0x30, 0x84, 0x1, {0x40, 0x2, 0x200, 0x1000, 0x8, 0x50, 0x6, 0x1000, r6}}, @prinfo={0x18, 0x84, 0x5, {0x20, 0x7}}], 0x108, 0x8000}, {&(0x7f0000003280)=@in6={0xa, 0x4e20, 0x3, @rand_addr="292d7d19928ce0a9b420c9e335a4cfe8", 0x7f}, 0x1c, &(0x7f0000004600)=[{&(0x7f00000032c0)="1449eddae21d978e105e164fa6514d6440678d879ea9080c7856f2b5eaa6d5b559c6afd5f5745b55ef09a8734c64da98cb32da305beee5e0bba2e5de01bfd19b61ddc1630c5fa91f24ad640d5e0a82", 0x4f}, {&(0x7f0000003340)="15af1e1ca5d85e828743", 0xa}, {&(0x7f0000003380)="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", 0x1000}, {&(0x7f0000004380)="4b46be010507232e423c36669e7513251d8998a8caf8428c5054d69cff1c84c92058a5622a17443ac5d1719c6ccba59f22fb8f4fbcd62d71561beea53fd991cd89d9b89d369ae3c0c5e202334f1ecd4cf33aa6512743f9b39aad080342450982dd014e14287f5a45ba41fa223076af35da9e3d58134cf1b9a1d3b25d2fc65f4ed18dc027f77f90c8da2a812326e0088359dbbb9ddcf7f058bb94d377c7bd701d9c3446b23c322f1e94bbdde2e998fa2ecfd9f9f44c1edcbc5089fb1cae56", 0xbe}, {&(0x7f0000004440)="fa729cba1761f8ccfd475375479f2a4e08f4fcd0a293c2e2a26d9d99e5f0ab7eb4dbb8becbac43e5f7f2167af6a2e1330780e5220f5af1b2b375d9765acbbbe1df88797ec8fb499892207c238b4d9a2d426e58772504b586cf7c9789d30a7a86fdc431a25074bee6ee148459fbebd0769cdb80a442384682a43a08302a413a167c244dc880d0962af87ce0c7bdd2180ab0e21b948a5de40c1c24f1605ee46eb58cd8c79e", 0xa4}, {&(0x7f0000004500)="c22010c5230f6a574f182306a955cef80a0a1543e7b83e7b2334b452c0b6024d421b89b1eee60dc2900117b3516c6a85c1d1af5ce24315a9de22ebb3cf55447eb86a2dad2442ae88b081669a5d5e893116ffb18bf433b34639c98ad6cb8cfb201b3536ec4fffe3e0ccffad15f713e4e82874db5aa165eebf312e6a9e64d7ec5bb29e710a899aab00ef692fb7526973365e074b3f758b5097aed59ddad4faf33833a8e24afd78d527e66c46ed41ddaf411aebf96c25d2c26f9c39d96e92411f5d8bd00c9f90fd3dd915211a493ef6c71ed2a3e248f593ffbd205f9441a9a25ba1ac586d48695fcdb46df4e58864721be21f95b8c94875", 0xf6}], 0x6, &(0x7f0000004680)=[@authinfo={0x18, 0x84, 0x6, {0x8001}}, @init={0x18, 0x84, 0x0, {0x9, 0x401, 0xfffffffffffffbff, 0xf7c9}}, @dstaddrv4={0x18, 0x84, 0x7, @broadcast}], 0x48}], 0x3, 0x20040011) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000004840)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000004800)={0xffffffffffffffff}, 0x106, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_REJECT(r1, &(0x7f0000004880)={0x9, 0x108, 0xfa00, {r7, 0xa2, "eccb46", "a7f0851638c8fab74735351c6cea818807f13bea35d76fb91f71a8cae9f8b0b744c12fc591a1bd8f7a2258090004a3d67c3e623f6eb4c5fc10779035a911250402fff86da58581a9bc8ef0dad814ea3aac16c4b95c3e987532c4a144b75103930d542131e3a3341baf93f56e63515fbcb3754011dc55960faa60cd21290d276d3f6e9dd90c9671ee09ffbc80d7f3349e8bb15f1d150acd784f278b741f8f563512380484d7ab50c86edd9b004cf1fa845250e51088865d98bf477e6433d8aa19384c8cb5655c5f1d4695bb4c122b6abecbff3b86917f5d8414a4ad053fe3e8b0ae4f8854099a401f8cc29ac9e154250a88b87c7f814cc070deb685407710ff0d"}}, 0x110) write(r2, &(0x7f0000000300)="6963e64243ea486da3a74e3deec6fd5bb965005de56946c568f95d22467190ba406d59a5958d6f156c9c8a2ac4677b00001900000000000000200000f8bf54da33", 0x41) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r2, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:21:38 executing program 0: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000006c0)='/proc/sys/net/ipv4/vs/expire_nodest_conn\x00', 0x2, 0x0) dup3(r0, r0, 0x80000) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000700), &(0x7f0000000740)=0x4) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, &(0x7f00000007c0)=0x4) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000800)={r5, 0x9}, 0x8) ioctl$sock_inet_SIOCSIFBRDADDR(r4, 0x891a, &(0x7f0000000080)={'tunl0\x00', {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r6 = mmap$binder(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000000, 0x100010, r4, 0x0) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000200)={'ipddp0\x00', {0x2, 0x4e21, @broadcast}}) ioctl$BINDER_WRITE_READ(r4, 0xc0306201, &(0x7f0000000440)={0x119, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00634040030000000000000000000000000000000000000001000000000000000000000048000000000000001800000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB="852a747001000000", @ANYPTR=&(0x7f0000000780)=ANY=[@ANYBLOB="2200b3eb6df1549ea093585a"], @ANYBLOB="0100000000000000030000000000000022000000000000008561646600000000080000000000000000000000000000000b00000000000000"], @ANYBLOB="7bf866fd140e222aeb7d91c39e20b698692c2d706b2078e614b952993cc90f38873d650813621a5f65a2f1db63086fb0f298cb094c42453b437c0f4bd9c6a22c8c4a47d1c1512904d09f4f72e82dc08eb35bb239b9ce2dba1bbaf757d7018507b57fa296f1df7ff6d86b1255759dd201c62cc9ac89", @ANYBLOB="0f630c4002000000040000000000000001634040040000000000000002000000000000000000000010000000000000000000000000000000000000003000000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[], @ANYPTR=&(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000020000000000000000000000000000000200000000000000040000000000000004800000000000000"], @ANYPTR=&(0x7f0000000980)=ANY=[@ANYPTR, @ANYRES64=r2, @ANYRESHEX=r0, @ANYRES16=r6, @ANYPTR64, @ANYRESHEX=r1, @ANYPTR=&(0x7f0000000900)=ANY=[@ANYRES32=r1, @ANYRESHEX=r2, @ANYPTR64, @ANYRES64=r0, @ANYPTR64, @ANYRESHEX, @ANYRESHEX=r1], @ANYRESHEX, @ANYRES64=r0], @ANYRES64=r6, @ANYBLOB='\rc\x00\x00'], 0x13, 0x0, &(0x7f00000002c0)="3c8c798952ac2947199a39d4c6eff4f7b9a769"}) 04:21:38 executing program 4: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:38 executing program 3: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) write$UHID_DESTROY(r0, &(0x7f0000000100), 0xb341722acc0703fa) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$IMADDTIMER(r1, 0x80044941, &(0x7f0000000340)) 04:21:48 executing program 1: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) 04:21:48 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x6400, 0x0) fsetxattr$security_evm(r0, &(0x7f0000000180)='security.evm\x00', &(0x7f00000001c0)=@sha1={0x1, "bb701fbeeaa7e7fb57e7acab3f2b53a3ab1c952d"}, 0x15, 0x2) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x1e, 0x0, 0x0) 04:21:48 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000040)=0x14) socket$key(0xf, 0x3, 0x2) setsockopt$inet6_IPV6_PKTINFO(r1, 0x29, 0x32, &(0x7f0000000080)={@local, r2}, 0x14) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)) mlock2(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x1) 04:21:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) 04:21:48 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}) setfsgid(r2) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:21:48 executing program 2: openat$zero(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41c1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$UI_GET_SYSNAME(0xffffffffffffffff, 0x8040552c, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) gettid() r0 = socket(0x11, 0x802, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000000)={'team0\x00\x10\x00'}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x541b, &(0x7f0000000240)={'team0\x00\x00\xff\xff\xff\xc0\x00\x03\x00\x02\xff', 0x4bfd}) 04:21:48 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) 04:21:48 executing program 3: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x400800, 0x0) write$FUSE_STATFS(r1, &(0x7f0000000040)={0x60, 0xfffffffffffffffe, 0x6, {{0x101, 0x3, 0x4a, 0x1, 0x401, 0x24, 0x81, 0xffffffffffffff0c}}}, 0x60) ioctl$IMADDTIMER(r0, 0x80044941, &(0x7f0000000340)=0xffffffffffffffff) 04:21:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:21:58 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0, 0xd8, &(0x7f0000000180)=[@in6={0xa, 0x4e24, 0x7, @ipv4={[], [], @multicast2}, 0xffff}, @in6={0xa, 0x4e20, 0x5b, @dev={0xfe, 0x80, [], 0x23}, 0x4}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e21, 0x8, @local, 0x673f}, @in={0x2, 0x4e22, @local}, @in={0x2, 0x4e24, @multicast2}, @in6={0xa, 0x4e22, 0x2e2e, @empty, 0xd27}, @in6={0xa, 0x4e22, 0x9, @rand_addr="7c06e559c6280d83e31e82a5e75f5ba1", 0x1}, @in6={0xa, 0x4e23, 0x8000, @rand_addr="419e9a2616965b9437c2eb76f22fcd18", 0xffff}]}, &(0x7f0000000280)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000002c0)={r2, 0xe27}, 0x8) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x2000001, 0x11, r1, 0x0) openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x101000, 0x0) open(&(0x7f0000000040)='./file0\x00', 0x8040, 0x0) 04:21:58 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x18b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x55, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) add_key$user(&(0x7f0000000180)='user\x00', &(0x7f00000001c0)={'syz'}, &(0x7f0000000540)="fc", 0x1, 0xfffffffffffffffe) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={'syz'}, &(0x7f00000000c0)='\xd1?\xf3\xd7v', 0x0) 04:21:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x21, 0x0, 0x0) 04:21:58 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:21:58 executing program 4: r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg(r0, &(0x7f0000000440)={&(0x7f0000000000)=@nfc={0x103, 0x14}, 0x80, &(0x7f0000000280)=[{&(0x7f0000000100)="9cabbf0400cb8e40419b80008100500000010000010000de723722762f0f31fd401a373a", 0x24}], 0x1}, 0x0) 04:21:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4008ae89, &(0x7f00000001c0)={0x7b, 0x600000000000000, [0x26a, 0x2], [0xc2]}) 04:21:58 executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x2000004e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x1c) 04:21:58 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x22, 0x0, 0x0) 04:22:08 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:09 executing program 4: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_S_INPUT(r0, 0xc0045627, &(0x7f0000000000)) prctl$PR_SVE_GET_VL(0x33, 0x1368d) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)=0x401) r1 = syz_open_dev$radio(&(0x7f0000000100)='/dev/radio#\x00', 0x2, 0x2) ioctl$sock_netdev_private(r1, 0x0, 0x0) 04:22:09 executing program 0: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, r4, 0x0) r5 = inotify_init1(0x0) fcntl$setown(r5, 0x8, 0xffffffffffffffff) fcntl$getownex(r5, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r6, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) fstat(0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, 0x0, 0x0) rt_sigprocmask(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x5) r7 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="000000000000000024001200140001006272696467655f736c617665000000000c0005000800220000000000"], 0x1}}, 0x0) fsync(r0) ioctl$UI_SET_LEDBIT(r7, 0x40045569, 0xf) ioctl$CAPI_MANUFACTURER_CMD(r7, 0xc0104320, &(0x7f0000000180)={0x2, &(0x7f0000000400)="9f6ff1f592bb94255edb0ecbc4dec6ff40cb78914dc7b806bf9e3de5a201c27b2376dc3f3d15069e4506d803c4f3d5446e753bdf3feb8e563695eebd014d7b0f0b1f9294b3baab0eccb94ea8ad8abf99acaddbb1f443e540b6365d6d2d034f1e899ad02e609b6c9b405e3dbecc69b993c2519f0b163345aec49af540c28207ceb3b9cebe0bd3c75e375230d38e99ed9037e75e0546"}) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r2, 0x40505330, &(0x7f00000002c0)={{0xffffffffffffff59}, {0x4, 0x401}, 0x40, 0x1, 0x1000}) 04:22:09 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f000095bffc), 0x4) 04:22:09 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) io_setup(0xfff, &(0x7f0000000000)=0x0) io_getevents(r1, 0x3, 0xfffffd41, 0xfffffffffffffffd, 0x0) io_submit(r1, 0x1, &(0x7f0000000040)=[&(0x7f0000587000)={0x0, 0x0, 0x0, 0x8000000000000008, 0x0, r0, 0x0}]) 04:22:19 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x23, 0x0, 0x0) 04:22:19 executing program 0: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video37\x00', 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x24, 0x0, 0x0) 04:22:29 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:29 executing program 3: socketpair$unix(0x1, 0x2000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f0000000700)='./file1\x00', 0x0) creat(&(0x7f0000000340)='./file1/file0\x00', 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0, 0x0) ioctl$EXT4_IOC_SETFLAGS(r1, 0x80086601, 0x0) 04:22:29 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000240)='net/snmp6\x00') sendfile(r0, r1, &(0x7f0000000040)=0x100000, 0x8001) [ 544.662814] overlayfs: './file0' not a directory 04:22:29 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 545.261120] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 545.268837] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 545.276103] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 545.283366] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 545.290631] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 545.297899] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:22:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:22:39 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:39 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x25, 0x0, 0x0) 04:22:39 executing program 0 (fault-call:1 fault-nth:1): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 554.781953] FAULT_INJECTION: forcing a failure. [ 554.781953] name failslab, interval 1, probability 0, space 0, times 0 [ 554.810908] 9pnet: Insufficient options for proto=fd 04:22:39 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 555.000465] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.019376] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.027083] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 555.034348] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 555.041612] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 555.048882] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 555.056150] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:22:40 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:40 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 555.587414] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 555.595116] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 555.602388] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 555.609672] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 555.616970] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 555.624254] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:22:49 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x26, 0x0, 0x0) 04:22:49 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:22:49 executing program 0 (fault-call:1 fault-nth:3): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 565.024415] FAULT_INJECTION: forcing a failure. [ 565.024415] name failslab, interval 1, probability 0, space 0, times 0 04:22:50 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 565.084256] CPU: 1 PID: 30542 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 565.091217] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.100576] Call Trace: [ 565.103174] dump_stack+0x172/0x1f0 [ 565.106826] should_fail.cold+0xa/0x15 [ 565.110750] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 565.115872] ? ___might_sleep+0x163/0x280 [ 565.120057] __should_failslab+0x121/0x190 [ 565.124309] should_failslab+0x9/0x14 [ 565.128127] kmem_cache_alloc_node_trace+0x270/0x720 [ 565.133253] __kmalloc_node_track_caller+0x3d/0x70 [ 565.133274] __kmalloc_reserve.isra.0+0x40/0xf0 [ 565.133307] __alloc_skb+0x10b/0x5e0 [ 565.142903] ? skb_trim+0x190/0x190 [ 565.142937] ? vhci_write+0x2b3/0x470 [ 565.142958] ? rcu_read_lock_sched_held+0x110/0x130 [ 565.142975] ? kmem_cache_free+0x225/0x260 [ 565.163354] __vhci_create_device+0x88/0x5a0 [ 565.167769] vhci_write+0x2d0/0x470 [ 565.171492] __vfs_write+0x613/0x8e0 [ 565.175217] ? kernel_read+0x120/0x120 [ 565.179106] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 565.184686] ? rw_verify_area+0x118/0x360 [ 565.188862] vfs_write+0x20c/0x580 [ 565.192404] ksys_write+0xea/0x1f0 [ 565.195967] ? __ia32_sys_read+0xb0/0xb0 [ 565.200031] ? do_syscall_64+0x26/0x610 [ 565.204045] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.209407] ? do_syscall_64+0x26/0x610 [ 565.213384] __x64_sys_write+0x73/0xb0 [ 565.217276] do_syscall_64+0x103/0x610 [ 565.221166] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.226356] RIP: 0033:0x457f29 [ 565.229543] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.248441] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.256145] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 565.263407] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 565.270667] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 565.277943] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 04:22:50 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000100)='fd\x00\xe8\xedB,x}\xdc1=\n3B\xb4iAb\\6\x01\xc9\b\x17\xde&\xfb\t\x87a\xef\xcc\xef\n\xc4\x94\xab\v\'n\t.\x17\xf0\x14\xda3h\xda\xf4\x9a1q\xe9\xdd\xec\'\xf6Im\x89/L\xe4\xe34\x88\x87\xc4\xe6v\xbf\xe9\x8e\xbfp0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:22:50 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:22:50 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) r1 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r1, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) [ 565.494394] FAULT_INJECTION: forcing a failure. [ 565.494394] name failslab, interval 1, probability 0, space 0, times 0 04:22:50 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 565.592814] CPU: 0 PID: 30568 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 565.599765] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 565.609125] Call Trace: [ 565.611752] dump_stack+0x172/0x1f0 [ 565.615409] should_fail.cold+0xa/0x15 [ 565.619319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 565.624442] ? ___might_sleep+0x163/0x280 [ 565.628643] __should_failslab+0x121/0x190 [ 565.632908] should_failslab+0x9/0x14 [ 565.636717] kmem_cache_alloc_trace+0x2d1/0x760 [ 565.641401] ? skb_trim+0x190/0x190 [ 565.645033] ? vhci_write+0x2b3/0x470 [ 565.648854] ? rcu_read_lock_sched_held+0x110/0x130 [ 565.653872] hci_alloc_dev+0x43/0x1d00 [ 565.657767] __vhci_create_device+0x101/0x5a0 [ 565.662269] vhci_write+0x2d0/0x470 [ 565.665920] __vfs_write+0x613/0x8e0 [ 565.669638] ? kernel_read+0x120/0x120 [ 565.673560] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 565.679120] ? rw_verify_area+0x118/0x360 [ 565.683303] vfs_write+0x20c/0x580 [ 565.686853] ksys_write+0xea/0x1f0 [ 565.690398] ? __ia32_sys_read+0xb0/0xb0 [ 565.694484] ? do_syscall_64+0x26/0x610 [ 565.698467] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.703829] ? do_syscall_64+0x26/0x610 [ 565.707826] __x64_sys_write+0x73/0xb0 [ 565.711739] do_syscall_64+0x103/0x610 [ 565.715636] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 565.720824] RIP: 0033:0x457f29 [ 565.726275] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 565.745171] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 565.752892] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 565.760158] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 565.767430] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 565.774722] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 565.781988] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:22:50 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:22:50 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x27, 0x0, 0x0) 04:23:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:00 executing program 0 (fault-call:1 fault-nth:5): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:00 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:00 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x28, 0x0, 0x0) [ 575.276656] FAULT_INJECTION: forcing a failure. [ 575.276656] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 575.288539] CPU: 1 PID: 30600 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 575.288552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 575.288558] Call Trace: [ 575.288583] dump_stack+0x172/0x1f0 [ 575.288613] should_fail.cold+0xa/0x15 [ 575.288636] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 575.288655] ? __lock_acquire+0x548/0x3fb0 [ 575.288674] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 575.288697] should_fail_alloc_page+0x50/0x60 [ 575.288715] __alloc_pages_nodemask+0x1a1/0x7e0 [ 575.288738] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 575.288754] ? find_held_lock+0x35/0x130 [ 575.324431] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 575.324456] cache_grow_begin+0x9c/0x860 [ 575.324473] ? hci_alloc_dev+0x43/0x1d00 [ 575.357367] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 575.357390] kmem_cache_alloc_trace+0x67f/0x760 [ 575.357417] hci_alloc_dev+0x43/0x1d00 [ 575.357437] __vhci_create_device+0x101/0x5a0 [ 575.357458] vhci_write+0x2d0/0x470 [ 575.357478] __vfs_write+0x613/0x8e0 [ 575.357498] ? kernel_read+0x120/0x120 [ 575.357513] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 575.357547] ? rw_verify_area+0x118/0x360 [ 575.383827] vfs_write+0x20c/0x580 [ 575.383851] ksys_write+0xea/0x1f0 [ 575.383871] ? __ia32_sys_read+0xb0/0xb0 [ 575.383889] ? do_syscall_64+0x26/0x610 [ 575.391477] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.391493] ? do_syscall_64+0x26/0x610 [ 575.391517] __x64_sys_write+0x73/0xb0 [ 575.391538] do_syscall_64+0x103/0x610 [ 575.433334] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 575.438525] RIP: 0033:0x457f29 [ 575.441722] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 575.460625] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 575.468333] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 04:23:00 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:00 executing program 3: r0 = getpgrp(0xffffffffffffffff) ptrace$setregset(0x4205, r0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)="aa0258615aa275f4bea1afe2da9b2779f5675092f19532fdeb7d77bf02eecdba4b3f586f9fa2fb8be844dff58b052b60e3a5ad44e992537aba93dc339e", 0x3d}) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) [ 575.475602] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 575.482871] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 575.490138] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 575.497417] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:23:00 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:00 executing program 3: getpgrp(0xffffffffffffffff) r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:00 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:00 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:11 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:11 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:11 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x29, 0x0, 0x0) 04:23:11 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:11 executing program 0 (fault-call:1 fault-nth:6): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 586.202920] FAULT_INJECTION: forcing a failure. [ 586.202920] name failslab, interval 1, probability 0, space 0, times 0 [ 586.225314] CPU: 1 PID: 30642 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 586.232260] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.241623] Call Trace: [ 586.244245] dump_stack+0x172/0x1f0 [ 586.247885] should_fail.cold+0xa/0x15 [ 586.251815] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 586.256925] ? ___might_sleep+0x163/0x280 [ 586.261095] __should_failslab+0x121/0x190 [ 586.265336] should_failslab+0x9/0x14 [ 586.269136] __kmalloc+0x2dc/0x740 [ 586.272697] ? alloc_workqueue+0x13c/0xe70 [ 586.276933] alloc_workqueue+0x13c/0xe70 [ 586.281037] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 586.286071] ? scnprintf+0x140/0x140 [ 586.289818] ? __init_waitqueue_head+0x36/0x90 [ 586.294424] hci_register_dev+0x1b8/0x860 [ 586.298570] ? hci_init_sysfs+0x7c/0xa0 [ 586.302548] __vhci_create_device+0x2d0/0x5a0 [ 586.307047] vhci_write+0x2d0/0x470 [ 586.310695] __vfs_write+0x613/0x8e0 [ 586.314408] ? kernel_read+0x120/0x120 [ 586.318291] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 586.323841] ? rw_verify_area+0x118/0x360 [ 586.328038] vfs_write+0x20c/0x580 [ 586.331597] ksys_write+0xea/0x1f0 [ 586.335136] ? __ia32_sys_read+0xb0/0xb0 [ 586.339219] ? do_syscall_64+0x26/0x610 [ 586.343193] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.348561] ? do_syscall_64+0x26/0x610 [ 586.352543] __x64_sys_write+0x73/0xb0 [ 586.356439] do_syscall_64+0x103/0x610 [ 586.360338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.365520] RIP: 0033:0x457f29 [ 586.368705] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.387601] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.395300] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 04:23:11 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 586.402561] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 586.409843] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 586.417105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 586.424367] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:23:11 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) [ 586.454292] Bluetooth: Can't register HCI device 04:23:11 executing program 0 (fault-call:1 fault-nth:7): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 04:23:11 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:11 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 586.629666] FAULT_INJECTION: forcing a failure. [ 586.629666] name failslab, interval 1, probability 0, space 0, times 0 [ 586.656169] 9pnet: Insufficient options for proto=fd [ 586.688638] CPU: 0 PID: 30659 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 586.695587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 586.704945] Call Trace: [ 586.707562] dump_stack+0x172/0x1f0 [ 586.711223] should_fail.cold+0xa/0x15 [ 586.715130] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 586.720258] ? ___might_sleep+0x163/0x280 [ 586.724459] __should_failslab+0x121/0x190 [ 586.728742] should_failslab+0x9/0x14 [ 586.732558] kmem_cache_alloc_trace+0x2d1/0x760 [ 586.737232] ? rcu_read_lock_sched_held+0x110/0x130 [ 586.742248] ? __kmalloc+0x5d5/0x740 [ 586.745967] alloc_workqueue_attrs+0x82/0x120 [ 586.750497] alloc_workqueue+0x166/0xe70 [ 586.754614] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 586.759633] ? scnprintf+0x140/0x140 [ 586.763347] ? __init_waitqueue_head+0x36/0x90 [ 586.767932] hci_register_dev+0x1b8/0x860 [ 586.772085] ? hci_init_sysfs+0x7c/0xa0 [ 586.776063] __vhci_create_device+0x2d0/0x5a0 [ 586.780565] vhci_write+0x2d0/0x470 [ 586.784195] __vfs_write+0x613/0x8e0 [ 586.787921] ? kernel_read+0x120/0x120 [ 586.791810] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 586.797383] ? rw_verify_area+0x118/0x360 [ 586.801760] vfs_write+0x20c/0x580 [ 586.805308] ksys_write+0xea/0x1f0 [ 586.808852] ? __ia32_sys_read+0xb0/0xb0 [ 586.812916] ? do_syscall_64+0x26/0x610 [ 586.816894] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.822248] ? do_syscall_64+0x26/0x610 [ 586.826226] __x64_sys_write+0x73/0xb0 [ 586.830126] do_syscall_64+0x103/0x610 [ 586.834029] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 586.839730] RIP: 0033:0x457f29 [ 586.842920] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 586.861815] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 586.869533] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 586.876793] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 04:23:11 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:11 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 586.884056] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 586.891322] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 586.898587] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 586.914919] Bluetooth: Can't register HCI device 04:23:11 executing program 0 (fault-call:1 fault-nth:8): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2a, 0x0, 0x0) [ 587.001884] 9pnet: Insufficient options for proto=fd [ 587.095195] FAULT_INJECTION: forcing a failure. [ 587.095195] name failslab, interval 1, probability 0, space 0, times 0 [ 587.109347] CPU: 0 PID: 30682 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 587.116408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 587.125766] Call Trace: [ 587.128373] dump_stack+0x172/0x1f0 [ 587.132013] should_fail.cold+0xa/0x15 [ 587.135895] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 587.140989] ? ___might_sleep+0x163/0x280 [ 587.145141] __should_failslab+0x121/0x190 [ 587.149363] should_failslab+0x9/0x14 [ 587.153156] __kmalloc_track_caller+0x2d8/0x740 [ 587.157813] ? pointer+0x910/0x910 [ 587.161339] ? set_precision+0x180/0x180 [ 587.165387] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 587.170314] ? kasprintf+0xbb/0xf0 [ 587.173844] kvasprintf+0xc8/0x170 [ 587.177379] ? bust_spinlocks+0xe0/0xe0 [ 587.181360] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 587.186382] ? find_next_bit+0x107/0x130 [ 587.190432] kasprintf+0xbb/0xf0 [ 587.193803] ? kvasprintf_const+0x190/0x190 [ 587.198117] ? kasan_check_read+0x11/0x20 [ 587.202256] alloc_workqueue+0x442/0xe70 [ 587.206311] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 587.211355] ? __init_waitqueue_head+0x36/0x90 [ 587.215945] hci_register_dev+0x1b8/0x860 [ 587.220102] ? hci_init_sysfs+0x7c/0xa0 [ 587.224066] __vhci_create_device+0x2d0/0x5a0 [ 587.228553] vhci_write+0x2d0/0x470 [ 587.232173] __vfs_write+0x613/0x8e0 [ 587.235890] ? kernel_read+0x120/0x120 [ 587.239778] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 587.245324] ? rw_verify_area+0x118/0x360 [ 587.249485] vfs_write+0x20c/0x580 [ 587.253045] ksys_write+0xea/0x1f0 [ 587.256575] ? __ia32_sys_read+0xb0/0xb0 [ 587.260632] ? do_syscall_64+0x26/0x610 [ 587.264695] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.270045] ? do_syscall_64+0x26/0x610 [ 587.274034] __x64_sys_write+0x73/0xb0 [ 587.277919] do_syscall_64+0x103/0x610 [ 587.281805] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 587.286989] RIP: 0033:0x457f29 [ 587.290166] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 587.309065] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 587.316789] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 587.324041] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 587.331320] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 587.338573] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 587.345822] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:23:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:21 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:23:21 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:21 executing program 2: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 04:23:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2b, 0x0, 0x0) [ 597.009022] 9pnet: Insufficient options for proto=fd 04:23:21 executing program 3: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(0xffffffffffffffff, 0xc02c564a, &(0x7f0000000180)={0x401, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:22 executing program 2: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) [ 597.145235] 9pnet: Insufficient options for proto=fd 04:23:22 executing program 2: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 04:23:22 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:23:22 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) [ 597.282308] 9pnet: Insufficient options for proto=fd 04:23:22 executing program 0 (fault-call:1 fault-nth:9): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:22 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) [ 597.658915] FAULT_INJECTION: forcing a failure. [ 597.658915] name failslab, interval 1, probability 0, space 0, times 0 [ 597.675118] CPU: 1 PID: 30724 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 597.682070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 597.691426] Call Trace: [ 597.694038] dump_stack+0x172/0x1f0 [ 597.697659] should_fail.cold+0xa/0x15 [ 597.701549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 597.706659] ? ___might_sleep+0x163/0x280 [ 597.710811] __should_failslab+0x121/0x190 [ 597.715047] should_failslab+0x9/0x14 [ 597.718842] __kmalloc+0x2dc/0x740 [ 597.722388] ? apply_wqattrs_prepare+0xae/0x970 [ 597.727047] apply_wqattrs_prepare+0xae/0x970 [ 597.731554] apply_workqueue_attrs_locked+0xcb/0x140 [ 597.736659] apply_workqueue_attrs+0x31/0x50 [ 597.741076] alloc_workqueue+0x84c/0xe70 [ 597.745142] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 597.750162] ? __init_waitqueue_head+0x36/0x90 [ 597.754734] hci_register_dev+0x1b8/0x860 [ 597.758878] ? hci_init_sysfs+0x7c/0xa0 [ 597.764267] __vhci_create_device+0x2d0/0x5a0 [ 597.768769] vhci_write+0x2d0/0x470 [ 597.772399] __vfs_write+0x613/0x8e0 [ 597.776100] ? kernel_read+0x120/0x120 [ 597.779986] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 597.785550] ? rw_verify_area+0x118/0x360 [ 597.789735] vfs_write+0x20c/0x580 [ 597.793279] ksys_write+0xea/0x1f0 [ 597.796826] ? __ia32_sys_read+0xb0/0xb0 [ 597.800878] ? do_syscall_64+0x26/0x610 [ 597.804839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.810190] ? do_syscall_64+0x26/0x610 [ 597.814187] __x64_sys_write+0x73/0xb0 [ 597.818060] do_syscall_64+0x103/0x610 [ 597.821960] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 597.827143] RIP: 0033:0x457f29 [ 597.830323] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 597.849211] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 597.856920] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 597.864183] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 597.871547] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 597.878801] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 597.886061] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 597.925050] Bluetooth: Can't register HCI device 04:23:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:32 executing program 2: pipe2$9p(0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno'}}) 04:23:32 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:23:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, 0x0) 04:23:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2c, 0x0, 0x0) 04:23:32 executing program 0 (fault-call:1 fault-nth:10): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x30314142, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) [ 607.279473] FAULT_INJECTION: forcing a failure. [ 607.279473] name failslab, interval 1, probability 0, space 0, times 0 [ 607.292192] 9pnet: Insufficient options for proto=fd [ 607.353204] CPU: 1 PID: 30740 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 607.360181] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.369536] Call Trace: [ 607.369621] dump_stack+0x172/0x1f0 [ 607.375834] should_fail.cold+0xa/0x15 [ 607.379735] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 607.384850] ? ___might_sleep+0x163/0x280 [ 607.384873] __should_failslab+0x121/0x190 [ 607.384895] should_failslab+0x9/0x14 [ 607.384912] kmem_cache_alloc_trace+0x2d1/0x760 [ 607.384930] ? rcu_read_lock_sched_held+0x110/0x130 [ 607.384945] ? __kmalloc+0x5d5/0x740 [ 607.384971] alloc_workqueue_attrs+0x82/0x120 [ 607.384992] apply_wqattrs_prepare+0xbb/0x970 [ 607.419488] apply_workqueue_attrs_locked+0xcb/0x140 [ 607.424619] apply_workqueue_attrs+0x31/0x50 [ 607.429042] alloc_workqueue+0x84c/0xe70 [ 607.433132] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 607.438182] ? __init_waitqueue_head+0x36/0x90 [ 607.442778] hci_register_dev+0x1b8/0x860 [ 607.446940] ? hci_init_sysfs+0x7c/0xa0 [ 607.450922] __vhci_create_device+0x2d0/0x5a0 [ 607.455423] vhci_write+0x2d0/0x470 [ 607.459056] __vfs_write+0x613/0x8e0 [ 607.462774] ? kernel_read+0x120/0x120 [ 607.466662] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.472215] ? rw_verify_area+0x118/0x360 [ 607.476371] vfs_write+0x20c/0x580 [ 607.479912] ksys_write+0xea/0x1f0 [ 607.483446] ? __ia32_sys_read+0xb0/0xb0 [ 607.487518] ? do_syscall_64+0x26/0x610 [ 607.491499] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.496853] ? do_syscall_64+0x26/0x610 [ 607.500827] __x64_sys_write+0x73/0xb0 [ 607.504725] do_syscall_64+0x103/0x610 [ 607.508661] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 607.513885] RIP: 0033:0x457f29 [ 607.517087] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 607.535976] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 607.543677] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 04:23:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 607.550940] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 607.558219] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 607.565493] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 607.572774] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:23:32 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 607.604929] Bluetooth: Can't register HCI device 04:23:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x2, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:32 executing program 0 (fault-call:1 fault-nth:11): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:32 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:32 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise={0x8, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) [ 607.862782] FAULT_INJECTION: forcing a failure. [ 607.862782] name failslab, interval 1, probability 0, space 0, times 0 [ 607.874156] CPU: 1 PID: 30770 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 607.881102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 607.890471] Call Trace: [ 607.893062] dump_stack+0x172/0x1f0 [ 607.896701] should_fail.cold+0xa/0x15 [ 607.900595] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 607.905742] ? ___might_sleep+0x163/0x280 [ 607.909914] __should_failslab+0x121/0x190 [ 607.914152] should_failslab+0x9/0x14 [ 607.917957] kmem_cache_alloc_trace+0x2d1/0x760 [ 607.922626] ? rcu_read_lock_sched_held+0x110/0x130 [ 607.927641] ? __kmalloc+0x5d5/0x740 [ 607.931391] alloc_workqueue_attrs+0x82/0x120 [ 607.935890] apply_wqattrs_prepare+0xc8/0x970 [ 607.940418] apply_workqueue_attrs_locked+0xcb/0x140 [ 607.945529] apply_workqueue_attrs+0x31/0x50 [ 607.949940] alloc_workqueue+0x84c/0xe70 [ 607.954013] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 607.959125] ? __init_waitqueue_head+0x36/0x90 [ 607.963719] hci_register_dev+0x1b8/0x860 [ 607.967869] ? hci_init_sysfs+0x7c/0xa0 [ 607.971877] __vhci_create_device+0x2d0/0x5a0 [ 607.976375] vhci_write+0x2d0/0x470 [ 607.980023] __vfs_write+0x613/0x8e0 [ 607.983748] ? kernel_read+0x120/0x120 [ 607.987677] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 607.993227] ? rw_verify_area+0x118/0x360 [ 607.997447] vfs_write+0x20c/0x580 [ 608.000988] ksys_write+0xea/0x1f0 [ 608.004545] ? __ia32_sys_read+0xb0/0xb0 [ 608.008635] ? do_syscall_64+0x26/0x610 [ 608.012611] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.017970] ? do_syscall_64+0x26/0x610 [ 608.021945] __x64_sys_write+0x73/0xb0 [ 608.025867] do_syscall_64+0x103/0x610 [ 608.029773] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.034955] RIP: 0033:0x457f29 [ 608.038148] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.057063] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.064766] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 608.072030] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 608.079315] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 608.086582] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 608.093848] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:23:33 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:23:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 608.109369] Bluetooth: Can't register HCI device 04:23:33 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(0x0, 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2d, 0x0, 0x0) 04:23:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise={0x0, 0x6, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:33 executing program 0 (fault-call:1 fault-nth:12): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x7, 0x0, 0x9, 0xdd9}}) 04:23:33 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 608.286121] FAULT_INJECTION: forcing a failure. [ 608.286121] name failslab, interval 1, probability 0, space 0, times 0 04:23:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x9, 0xdd9}}) [ 608.334823] CPU: 0 PID: 30789 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 608.341776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 608.351138] Call Trace: [ 608.353741] dump_stack+0x172/0x1f0 [ 608.357397] should_fail.cold+0xa/0x15 [ 608.361311] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 608.366439] ? ___might_sleep+0x163/0x280 [ 608.370600] __should_failslab+0x121/0x190 [ 608.374849] should_failslab+0x9/0x14 [ 608.378666] kmem_cache_alloc_node+0x264/0x710 04:23:33 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 608.383288] alloc_unbound_pwq+0x4c5/0xcf0 [ 608.387555] apply_wqattrs_prepare+0x35e/0x970 [ 608.392162] apply_workqueue_attrs_locked+0xcb/0x140 [ 608.397277] apply_workqueue_attrs+0x31/0x50 [ 608.401711] alloc_workqueue+0x84c/0xe70 [ 608.405791] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 608.410825] ? __init_waitqueue_head+0x36/0x90 [ 608.415428] hci_register_dev+0x1b8/0x860 [ 608.419581] ? hci_init_sysfs+0x7c/0xa0 [ 608.423565] __vhci_create_device+0x2d0/0x5a0 [ 608.428065] vhci_write+0x2d0/0x470 [ 608.431706] __vfs_write+0x613/0x8e0 04:23:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise={0x0, 0x0, 0x0, 0x0, 0x0, 0xdd9}}) [ 608.435480] ? kernel_read+0x120/0x120 [ 608.439412] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 608.444971] ? rw_verify_area+0x118/0x360 [ 608.449125] vfs_write+0x20c/0x580 [ 608.452677] ksys_write+0xea/0x1f0 [ 608.456226] ? __ia32_sys_read+0xb0/0xb0 [ 608.460301] ? do_syscall_64+0x26/0x610 [ 608.464280] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.469645] ? do_syscall_64+0x26/0x610 [ 608.473623] __x64_sys_write+0x73/0xb0 [ 608.477517] do_syscall_64+0x103/0x610 04:23:33 executing program 3: r0 = openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video37\x00', 0x2, 0x0) ioctl$VIDIOC_ENUM_FRAMESIZES(r0, 0xc02c564a, &(0x7f0000000180)={0x0, 0x0, 0x0, @stepwise}) 04:23:33 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 608.481411] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 608.486601] RIP: 0033:0x457f29 [ 608.489798] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 608.508725] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 608.516437] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 608.523705] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 04:23:33 executing program 3: sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) arch_prctl$ARCH_GET_FS(0x1003, 0x0) r0 = creat(&(0x7f00000000c0)='./file1\x00', 0x0) write$cgroup_type(r0, &(0x7f00000009c0)='threaded\x00', 0xffffff8e) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) tgkill(0x0, 0x0, 0x0) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) mmap(&(0x7f00006ff000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) ioctl$VIDIOC_DECODER_CMD(0xffffffffffffffff, 0xc0485660, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, 0x0, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) ioctl$DRM_IOCTL_AGP_FREE(r0, 0x40206435, &(0x7f0000000240)={0xfffffffffffffc00, 0x0, 0x10001, 0x6}) semget(0xffffffffffffffff, 0x0, 0x2) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x101}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, 0x0, &(0x7f0000000200)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f0000000280), 0x4) creat(&(0x7f0000000080)='./file1\x00', 0x0) [ 608.530972] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 608.538248] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 608.545529] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 608.698638] Bluetooth: Can't register HCI device 04:23:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2e, 0x0, 0x0) 04:23:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r1, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) 04:23:34 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(0xffffffffffffffff) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:34 executing program 0 (fault-call:1 fault-nth:13): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:34 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket(0x10, 0x20000000000003, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0}) recvmmsg(r0, &(0x7f0000001cc0), 0x400000000000034, 0x10102, &(0x7f0000001540)={r1}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000003080)={0x14, 0x1a, 0x201}, 0x14}}, 0x0) [ 609.138448] FAULT_INJECTION: forcing a failure. [ 609.138448] name failslab, interval 1, probability 0, space 0, times 0 04:23:34 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 609.189874] CPU: 0 PID: 30829 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 609.196928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 609.206294] Call Trace: [ 609.208892] dump_stack+0x172/0x1f0 [ 609.212562] should_fail.cold+0xa/0x15 [ 609.216485] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 609.221634] ? ___might_sleep+0x163/0x280 [ 609.225824] __should_failslab+0x121/0x190 [ 609.230083] should_failslab+0x9/0x14 [ 609.233906] __kmalloc+0x2dc/0x740 04:23:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) [ 609.237510] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 609.242546] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 609.247316] ? alloc_workqueue+0x13c/0xe70 [ 609.251581] alloc_workqueue+0x13c/0xe70 [ 609.255728] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 609.260754] ? __init_waitqueue_head+0x36/0x90 [ 609.265346] hci_register_dev+0x209/0x860 [ 609.269530] __vhci_create_device+0x2d0/0x5a0 [ 609.274053] vhci_write+0x2d0/0x470 [ 609.277693] __vfs_write+0x613/0x8e0 [ 609.281431] ? kernel_read+0x120/0x120 04:23:34 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 609.285335] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 609.290906] ? rw_verify_area+0x118/0x360 [ 609.295097] vfs_write+0x20c/0x580 [ 609.298660] ksys_write+0xea/0x1f0 [ 609.302216] ? __ia32_sys_read+0xb0/0xb0 [ 609.306304] ? do_syscall_64+0x26/0x610 [ 609.310287] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.315657] ? do_syscall_64+0x26/0x610 [ 609.319643] __x64_sys_write+0x73/0xb0 [ 609.323544] do_syscall_64+0x103/0x610 [ 609.327468] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 609.332685] RIP: 0033:0x457f29 04:23:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:23:34 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 609.335888] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 609.354991] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 609.362735] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 609.370012] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 609.377459] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:23:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 609.384758] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 609.392049] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 609.425611] Bluetooth: Can't register HCI device 04:23:34 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x2f, 0x0, 0x0) 04:23:34 executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:23:34 executing program 0 (fault-call:1 fault-nth:14): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:34 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:34 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:34 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:34 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 610.022196] 9pnet: Insufficient options for proto=fd 04:23:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:35 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 610.098764] FAULT_INJECTION: forcing a failure. [ 610.098764] name failslab, interval 1, probability 0, space 0, times 0 [ 610.153936] CPU: 1 PID: 30876 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 610.160892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.160900] Call Trace: [ 610.160925] dump_stack+0x172/0x1f0 [ 610.160965] should_fail.cold+0xa/0x15 [ 610.180407] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.185526] ? ___might_sleep+0x163/0x280 [ 610.189690] __should_failslab+0x121/0x190 [ 610.193938] should_failslab+0x9/0x14 [ 610.193957] kmem_cache_alloc_trace+0x2d1/0x760 [ 610.193975] ? rcu_read_lock_sched_held+0x110/0x130 [ 610.194017] ? __kmalloc+0x5d5/0x740 [ 610.194042] alloc_workqueue_attrs+0x82/0x120 [ 610.215690] alloc_workqueue+0x166/0xe70 [ 610.219797] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 610.224830] ? __init_waitqueue_head+0x36/0x90 [ 610.229429] hci_register_dev+0x209/0x860 [ 610.233597] __vhci_create_device+0x2d0/0x5a0 [ 610.238106] vhci_write+0x2d0/0x470 [ 610.242272] __vfs_write+0x613/0x8e0 [ 610.245995] ? kernel_read+0x120/0x120 [ 610.246017] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 610.246053] ? rw_verify_area+0x118/0x360 [ 610.246073] vfs_write+0x20c/0x580 [ 610.246093] ksys_write+0xea/0x1f0 [ 610.246112] ? __ia32_sys_read+0xb0/0xb0 [ 610.246129] ? do_syscall_64+0x26/0x610 [ 610.270810] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.270826] ? do_syscall_64+0x26/0x610 [ 610.270849] __x64_sys_write+0x73/0xb0 [ 610.270868] do_syscall_64+0x103/0x610 [ 610.270890] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 610.270904] RIP: 0033:0x457f29 [ 610.300295] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 610.319263] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 610.326996] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 610.334278] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 610.341555] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:23:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, 0x0, 0x0) [ 610.348868] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 610.356137] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 610.421218] Bluetooth: Can't register HCI device 04:23:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x30, 0x0, 0x0) 04:23:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:35 executing program 0 (fault-call:1 fault-nth:15): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:35 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, 0x0, 0x0) [ 610.892425] FAULT_INJECTION: forcing a failure. [ 610.892425] name failslab, interval 1, probability 0, space 0, times 0 [ 610.906881] 9pnet: Insufficient options for proto=fd [ 610.942974] CPU: 1 PID: 31010 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 610.949924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 610.949932] Call Trace: [ 610.949955] dump_stack+0x172/0x1f0 [ 610.949981] should_fail.cold+0xa/0x15 [ 610.950025] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 610.974601] ? ___might_sleep+0x163/0x280 [ 610.978763] __should_failslab+0x121/0x190 [ 610.983022] should_failslab+0x9/0x14 [ 610.986848] __kmalloc+0x2dc/0x740 [ 610.990418] ? apply_wqattrs_prepare+0xae/0x970 [ 610.995099] apply_wqattrs_prepare+0xae/0x970 [ 610.999621] apply_workqueue_attrs_locked+0xcb/0x140 [ 611.004739] apply_workqueue_attrs+0x31/0x50 [ 611.009161] alloc_workqueue+0x84c/0xe70 [ 611.013244] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 611.013271] ? __init_waitqueue_head+0x36/0x90 [ 611.013299] hci_register_dev+0x209/0x860 [ 611.027060] __vhci_create_device+0x2d0/0x5a0 [ 611.031592] vhci_write+0x2d0/0x470 [ 611.035248] __vfs_write+0x613/0x8e0 [ 611.038977] ? kernel_read+0x120/0x120 04:23:35 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r1, 0x0, 0x0) 04:23:35 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 611.042883] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.048489] ? rw_verify_area+0x118/0x360 [ 611.052644] vfs_write+0x20c/0x580 [ 611.052666] ksys_write+0xea/0x1f0 [ 611.052685] ? __ia32_sys_read+0xb0/0xb0 [ 611.052706] ? do_syscall_64+0x26/0x610 [ 611.068109] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.073483] ? do_syscall_64+0x26/0x610 [ 611.077476] __x64_sys_write+0x73/0xb0 [ 611.081377] do_syscall_64+0x103/0x610 [ 611.085284] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.090479] RIP: 0033:0x457f29 [ 611.090495] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.090503] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.090518] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 611.090527] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 611.090537] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:23:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 611.090546] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 611.090555] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 611.113110] Bluetooth: Can't register HCI device 04:23:36 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:36 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket(0x40000000002, 0x3, 0x2) sendto$unix(r1, 0x0, 0x0, 0x0, &(0x7f0000000d00)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) [ 611.277177] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:23:36 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x31, 0x0, 0x0) 04:23:36 executing program 0 (fault-call:1 fault-nth:16): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:36 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000280), 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:36 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:36 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:36 executing program 1: syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r0 = syz_open_dev$binder(0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") ioctl$BINDER_SET_CONTEXT_MGR(r0, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000300)={0x4c, 0x0, &(0x7f0000000200)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}], 0x0, 0x0, 0x0}) [ 611.733808] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 611.741136] FAULT_INJECTION: forcing a failure. [ 611.741136] name failslab, interval 1, probability 0, space 0, times 0 [ 611.743430] binder: 31138:31149 got transaction to context manager from process owning it [ 611.752450] audit: type=1400 audit(1552019016.619:80): avc: denied { set_context_mgr } for pid=31138 comm="syz-executor.1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 611.797574] CPU: 1 PID: 31147 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 611.805023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 611.814373] Call Trace: [ 611.816971] dump_stack+0x172/0x1f0 [ 611.820612] should_fail.cold+0xa/0x15 [ 611.824512] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 611.829629] ? ___might_sleep+0x163/0x280 [ 611.833785] __should_failslab+0x121/0x190 [ 611.838029] should_failslab+0x9/0x14 [ 611.841834] __kmalloc+0x2dc/0x740 [ 611.845385] ? apply_wqattrs_prepare+0xae/0x970 [ 611.850061] apply_wqattrs_prepare+0xae/0x970 [ 611.854569] apply_workqueue_attrs_locked+0xcb/0x140 [ 611.859681] apply_workqueue_attrs+0x31/0x50 [ 611.864096] alloc_workqueue+0x84c/0xe70 [ 611.868165] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 611.873188] ? __init_waitqueue_head+0x36/0x90 [ 611.877794] hci_register_dev+0x209/0x860 [ 611.881971] __vhci_create_device+0x2d0/0x5a0 [ 611.886470] vhci_write+0x2d0/0x470 [ 611.890136] __vfs_write+0x613/0x8e0 [ 611.893855] ? kernel_read+0x120/0x120 [ 611.897744] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 611.903304] ? rw_verify_area+0x118/0x360 [ 611.907455] vfs_write+0x20c/0x580 [ 611.911000] ksys_write+0xea/0x1f0 [ 611.914554] ? __ia32_sys_read+0xb0/0xb0 [ 611.918629] ? do_syscall_64+0x26/0x610 [ 611.922637] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.928002] ? do_syscall_64+0x26/0x610 [ 611.932003] __x64_sys_write+0x73/0xb0 [ 611.935912] do_syscall_64+0x103/0x610 [ 611.939803] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 611.945024] RIP: 0033:0x457f29 [ 611.948217] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 611.967121] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 611.974849] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 611.982116] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 611.989399] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 611.996684] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 612.003950] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 612.013887] binder: 31138:31149 transaction failed 29201/-22, size 0-0 line 2985 04:23:36 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 612.034480] Bluetooth: Can't register HCI device 04:23:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:37 executing program 0 (fault-call:1 fault-nth:17): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:37 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 612.220728] FAULT_INJECTION: forcing a failure. [ 612.220728] name failslab, interval 1, probability 0, space 0, times 0 [ 612.229409] binder: undelivered TRANSACTION_ERROR: 29201 [ 612.248146] CPU: 0 PID: 31260 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 612.255094] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.264456] Call Trace: [ 612.267063] dump_stack+0x172/0x1f0 [ 612.270718] should_fail.cold+0xa/0x15 [ 612.274631] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 612.279764] ? ___might_sleep+0x163/0x280 [ 612.283938] __should_failslab+0x121/0x190 [ 612.288228] should_failslab+0x9/0x14 [ 612.292078] kmem_cache_alloc_trace+0x2d1/0x760 [ 612.296775] ? rcu_read_lock_sched_held+0x110/0x130 [ 612.301812] ? __kmalloc+0x5d5/0x740 [ 612.305559] alloc_workqueue_attrs+0x82/0x120 [ 612.310111] apply_wqattrs_prepare+0xc8/0x970 04:23:37 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', 0x0, 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r0}}) [ 612.313289] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 612.314660] apply_workqueue_attrs_locked+0xcb/0x140 [ 612.314681] apply_workqueue_attrs+0x31/0x50 [ 612.314699] alloc_workqueue+0x84c/0xe70 [ 612.314722] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 612.340305] ? __init_waitqueue_head+0x36/0x90 [ 612.344904] hci_register_dev+0x209/0x860 [ 612.349070] __vhci_create_device+0x2d0/0x5a0 [ 612.353586] vhci_write+0x2d0/0x470 [ 612.357255] __vfs_write+0x613/0x8e0 [ 612.361031] ? kernel_read+0x120/0x120 [ 612.364933] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 612.370600] ? rw_verify_area+0x118/0x360 [ 612.374763] vfs_write+0x20c/0x580 [ 612.378323] ksys_write+0xea/0x1f0 [ 612.381884] ? __ia32_sys_read+0xb0/0xb0 [ 612.385956] ? do_syscall_64+0x26/0x610 [ 612.389939] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.389956] ? do_syscall_64+0x26/0x610 [ 612.399298] __x64_sys_write+0x73/0xb0 [ 612.399319] do_syscall_64+0x103/0x610 [ 612.399341] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.399356] RIP: 0033:0x457f29 [ 612.407162] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.407171] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.407203] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 612.407212] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 612.407225] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 612.415605] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 612.442205] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 612.490467] Bluetooth: Can't register HCI device 04:23:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x32, 0x0, 0x0) 04:23:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:37 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 04:23:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:37 executing program 0 (fault-call:1 fault-nth:18): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:37 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) 04:23:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 612.723910] FAULT_INJECTION: forcing a failure. [ 612.723910] name failslab, interval 1, probability 0, space 0, times 0 [ 612.772830] CPU: 0 PID: 31290 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 612.779787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 612.789146] Call Trace: [ 612.791752] dump_stack+0x172/0x1f0 [ 612.795401] should_fail.cold+0xa/0x15 [ 612.799319] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 612.804705] ? ___might_sleep+0x163/0x280 [ 612.808874] __should_failslab+0x121/0x190 [ 612.813132] should_failslab+0x9/0x14 [ 612.816946] kmem_cache_alloc_node+0x264/0x710 [ 612.821565] alloc_unbound_pwq+0x4c5/0xcf0 [ 612.825824] apply_wqattrs_prepare+0x35e/0x970 [ 612.830436] apply_workqueue_attrs_locked+0xcb/0x140 [ 612.835555] apply_workqueue_attrs+0x31/0x50 [ 612.839975] alloc_workqueue+0x84c/0xe70 [ 612.844056] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 612.844083] ? __init_waitqueue_head+0x36/0x90 [ 612.844106] hci_register_dev+0x209/0x860 [ 612.857820] __vhci_create_device+0x2d0/0x5a0 [ 612.857841] vhci_write+0x2d0/0x470 [ 612.857863] __vfs_write+0x613/0x8e0 [ 612.857884] ? kernel_read+0x120/0x120 [ 612.857920] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 612.879146] ? rw_verify_area+0x118/0x360 [ 612.883317] vfs_write+0x20c/0x580 [ 612.886909] ksys_write+0xea/0x1f0 [ 612.890498] ? __ia32_sys_read+0xb0/0xb0 [ 612.894586] ? do_syscall_64+0x26/0x610 [ 612.898571] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 612.898587] ? do_syscall_64+0x26/0x610 [ 612.898611] __x64_sys_write+0x73/0xb0 [ 612.898629] do_syscall_64+0x103/0x610 [ 612.915736] entry_SYSCALL_64_after_hwframe+0x49/0xbe 04:23:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:37 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 612.920933] RIP: 0033:0x457f29 [ 612.924154] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 612.943079] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 612.950802] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 612.958125] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 612.965405] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 612.972681] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 612.979957] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 612.996996] Bluetooth: Can't register HCI device 04:23:38 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x33, 0x0, 0x0) 04:23:38 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:23:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:38 executing program 0 (fault-call:1 fault-nth:19): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:38 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, 0x0) [ 613.483620] FAULT_INJECTION: forcing a failure. [ 613.483620] name failslab, interval 1, probability 0, space 0, times 0 [ 613.505088] CPU: 1 PID: 31318 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 613.512043] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 613.521400] Call Trace: [ 613.524021] dump_stack+0x172/0x1f0 [ 613.527665] should_fail.cold+0xa/0x15 [ 613.531572] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 613.536710] ? ___might_sleep+0x163/0x280 [ 613.540872] __should_failslab+0x121/0x190 [ 613.545118] should_failslab+0x9/0x14 [ 613.548933] kmem_cache_alloc+0x2b2/0x6f0 [ 613.553099] __d_alloc+0x2e/0x8c0 [ 613.556568] d_alloc+0x4d/0x2b0 [ 613.556637] d_alloc_parallel+0xf4/0x1bc0 [ 613.556667] ? debug_smp_processor_id+0x3c/0x280 [ 613.556690] ? __d_lookup_rcu+0x6c0/0x6c0 [ 613.556707] ? __d_lookup+0x40c/0x760 [ 613.568879] ? lockdep_init_map+0x1be/0x6d0 [ 613.568913] ? lockdep_init_map+0x1be/0x6d0 [ 613.568941] __lookup_slow+0x1ab/0x500 [ 613.589581] ? vfs_unlink+0x560/0x560 [ 613.593401] ? lockdep_hardirqs_on+0x418/0x5d0 [ 613.598003] ? d_lookup+0x19e/0x260 [ 613.601657] lookup_one_len+0x16d/0x1a0 [ 613.605646] ? lookup_one_len_unlocked+0x100/0x100 [ 613.610599] start_creating+0xbf/0x1e0 [ 613.614500] debugfs_create_dir+0x26/0x3d0 [ 613.618750] hci_register_dev+0x299/0x860 [ 613.623020] __vhci_create_device+0x2d0/0x5a0 [ 613.627531] vhci_write+0x2d0/0x470 [ 613.631179] __vfs_write+0x613/0x8e0 [ 613.634906] ? kernel_read+0x120/0x120 [ 613.638799] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 613.644368] ? rw_verify_area+0x118/0x360 [ 613.648531] vfs_write+0x20c/0x580 [ 613.652092] ksys_write+0xea/0x1f0 [ 613.655647] ? __ia32_sys_read+0xb0/0xb0 [ 613.655667] ? do_syscall_64+0x26/0x610 [ 613.655685] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.655699] ? do_syscall_64+0x26/0x610 [ 613.655722] __x64_sys_write+0x73/0xb0 [ 613.655739] do_syscall_64+0x103/0x610 [ 613.655761] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 613.655778] RIP: 0033:0x457f29 [ 613.673146] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 613.673155] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 613.673171] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 613.673196] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 04:23:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:23:38 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:38 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:38 executing program 4: openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r0, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 04:23:38 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 613.673204] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 613.673217] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 613.725069] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 613.767970] 9pnet: Insufficient options for proto=fd 04:23:38 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) [ 613.963456] 9pnet: Insufficient options for proto=fd 04:23:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x34, 0x0, 0x0) 04:23:39 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:23:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:39 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:48 executing program 0 (fault-call:1 fault-nth:20): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:48 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno'}, 0x2c, {'wfdno', 0x3d, r0}}) 04:23:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:23:48 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x35, 0x0, 0x0) [ 623.927890] 9pnet: Insufficient options for proto=fd 04:23:48 executing program 3: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:23:48 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:48 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) [ 623.959900] FAULT_INJECTION: forcing a failure. [ 623.959900] name failslab, interval 1, probability 0, space 0, times 0 04:23:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 624.083275] 9pnet: Insufficient options for proto=fd [ 624.099837] CPU: 0 PID: 31376 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 624.106797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 624.116153] Call Trace: [ 624.118760] dump_stack+0x172/0x1f0 [ 624.122409] should_fail.cold+0xa/0x15 [ 624.126314] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 624.131438] ? ___might_sleep+0x163/0x280 [ 624.135601] __should_failslab+0x121/0x190 [ 624.139851] should_failslab+0x9/0x14 [ 624.143670] kmem_cache_alloc+0x2b2/0x6f0 [ 624.147841] __d_alloc+0x2e/0x8c0 [ 624.151313] d_alloc+0x4d/0x2b0 [ 624.154617] d_alloc_parallel+0xf4/0x1bc0 [ 624.158792] ? debug_smp_processor_id+0x3c/0x280 [ 624.163574] ? __d_lookup_rcu+0x6c0/0x6c0 [ 624.167736] ? __d_lookup+0x40c/0x760 [ 624.171558] ? lockdep_init_map+0x1be/0x6d0 [ 624.175891] ? lockdep_init_map+0x1be/0x6d0 [ 624.180259] __lookup_slow+0x1ab/0x500 [ 624.184180] ? vfs_unlink+0x560/0x560 [ 624.188004] ? lockdep_hardirqs_on+0x418/0x5d0 [ 624.192598] ? d_lookup+0x19e/0x260 [ 624.196237] lookup_one_len+0x16d/0x1a0 [ 624.200220] ? lookup_one_len_unlocked+0x100/0x100 [ 624.205166] start_creating+0xbf/0x1e0 [ 624.209056] debugfs_create_dir+0x26/0x3d0 [ 624.213296] hci_register_dev+0x299/0x860 [ 624.217474] __vhci_create_device+0x2d0/0x5a0 [ 624.221973] vhci_write+0x2d0/0x470 [ 624.225606] __vfs_write+0x613/0x8e0 [ 624.229327] ? kernel_read+0x120/0x120 [ 624.233242] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 624.238812] ? rw_verify_area+0x118/0x360 [ 624.242966] vfs_write+0x20c/0x580 [ 624.246512] ksys_write+0xea/0x1f0 [ 624.250060] ? __ia32_sys_read+0xb0/0xb0 [ 624.254124] ? do_syscall_64+0x26/0x610 [ 624.258100] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.263470] ? do_syscall_64+0x26/0x610 [ 624.267463] __x64_sys_write+0x73/0xb0 [ 624.271366] do_syscall_64+0x103/0x610 [ 624.275270] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 624.280461] RIP: 0033:0x457f29 [ 624.283652] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 624.302553] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 624.310282] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 624.317553] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 624.324838] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 04:23:49 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 04:23:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 624.332105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 624.339375] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 624.403337] 9pnet: Insufficient options for proto=fd 04:23:59 executing program 0 (fault-call:1 fault-nth:21): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:23:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:59 executing program 2: pipe2$9p(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) close(r0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/autofs\x00', 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f00000000c0)='9p\x00', 0x0, &(0x7f0000000440)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno'}}) 04:23:59 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:23:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x36, 0x0, 0x0) [ 634.808203] 9pnet: Insufficient options for proto=fd 04:23:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, 0x0, 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 634.833663] FAULT_INJECTION: forcing a failure. [ 634.833663] name failslab, interval 1, probability 0, space 0, times 0 [ 634.875112] CPU: 1 PID: 31416 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 634.882070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 634.891431] Call Trace: [ 634.894047] dump_stack+0x172/0x1f0 [ 634.897701] should_fail.cold+0xa/0x15 [ 634.901610] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 634.906736] ? ___might_sleep+0x163/0x280 [ 634.910908] __should_failslab+0x121/0x190 [ 634.915162] should_failslab+0x9/0x14 [ 634.918978] kmem_cache_alloc+0x2b2/0x6f0 04:23:59 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:23:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 634.923141] ? lookup_one_len+0x10e/0x1a0 [ 634.927311] alloc_inode+0xb8/0x190 [ 634.930953] new_inode_pseudo+0x19/0xf0 [ 634.934942] new_inode+0x1f/0x40 [ 634.938321] debugfs_get_inode+0x1a/0x130 [ 634.942479] debugfs_create_dir+0x7a/0x3d0 [ 634.946733] hci_register_dev+0x299/0x860 [ 634.950900] __vhci_create_device+0x2d0/0x5a0 [ 634.955414] vhci_write+0x2d0/0x470 [ 634.959065] __vfs_write+0x613/0x8e0 [ 634.962800] ? kernel_read+0x120/0x120 [ 634.966697] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 04:23:59 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000000)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0xa, 0x2000004e20, 0x0, @mcast1}, 0x1c) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) [ 634.972277] ? rw_verify_area+0x118/0x360 [ 634.976436] vfs_write+0x20c/0x580 [ 634.979994] ksys_write+0xea/0x1f0 [ 634.983555] ? __ia32_sys_read+0xb0/0xb0 [ 634.987634] ? do_syscall_64+0x26/0x610 [ 634.991622] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 634.996996] ? do_syscall_64+0x26/0x610 [ 635.000995] __x64_sys_write+0x73/0xb0 [ 635.004907] do_syscall_64+0x103/0x610 [ 635.008811] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 635.014008] RIP: 0033:0x457f29 [ 635.017232] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 635.036155] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 635.043866] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 635.051131] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 635.058401] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 635.065686] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 04:23:59 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:23:59 executing program 3: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 635.072953] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 635.202898] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:24:10 executing program 0 (fault-call:1 fault-nth:22): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:10 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:24:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:10 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCGIFBRDADDR(r1, 0x8982, &(0x7f00000000c0)={'\x06\x00\x00\x000\x00', {0x2, 0x0, @broadcast}}) 04:24:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x37, 0x0, 0x0) 04:24:10 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:24:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 645.721993] FAULT_INJECTION: forcing a failure. [ 645.721993] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 645.733839] CPU: 1 PID: 31597 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 645.740771] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 645.750133] Call Trace: [ 645.752742] dump_stack+0x172/0x1f0 [ 645.756396] should_fail.cold+0xa/0x15 [ 645.760317] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 645.765440] ? percpu_ref_tryget_live+0xef/0x290 [ 645.770210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 645.775759] ? debug_smp_processor_id+0x3c/0x280 [ 645.780560] should_fail_alloc_page+0x50/0x60 [ 645.785074] __alloc_pages_nodemask+0x1a1/0x7e0 [ 645.789757] ? find_held_lock+0x35/0x130 [ 645.793833] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 645.798984] cache_grow_begin+0x9c/0x860 [ 645.803498] ? alloc_inode+0xb8/0x190 [ 645.807322] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 645.812889] kmem_cache_alloc+0x62d/0x6f0 [ 645.817065] ? lookup_one_len+0x10e/0x1a0 [ 645.821225] alloc_inode+0xb8/0x190 [ 645.824851] new_inode_pseudo+0x19/0xf0 [ 645.828828] new_inode+0x1f/0x40 [ 645.832198] debugfs_get_inode+0x1a/0x130 [ 645.836369] debugfs_create_dir+0x7a/0x3d0 [ 645.840610] hci_register_dev+0x299/0x860 [ 645.844767] __vhci_create_device+0x2d0/0x5a0 [ 645.849269] vhci_write+0x2d0/0x470 [ 645.852910] __vfs_write+0x613/0x8e0 [ 645.856631] ? kernel_read+0x120/0x120 [ 645.860517] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 645.866081] ? rw_verify_area+0x118/0x360 [ 645.870236] vfs_write+0x20c/0x580 [ 645.873783] ksys_write+0xea/0x1f0 [ 645.877329] ? __ia32_sys_read+0xb0/0xb0 [ 645.881405] ? do_syscall_64+0x26/0x610 [ 645.885386] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.890750] ? do_syscall_64+0x26/0x610 [ 645.894735] __x64_sys_write+0x73/0xb0 [ 645.898627] do_syscall_64+0x103/0x610 [ 645.902522] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 645.907711] RIP: 0033:0x457f29 [ 645.910903] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 645.929816] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 645.937523] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 645.944793] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 645.952063] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 645.959328] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 04:24:10 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) [ 645.966597] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:24:10 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:10 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 04:24:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:21 executing program 0 (fault-call:1 fault-nth:23): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:21 executing program 2: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0xed) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendto$unix(r1, &(0x7f0000000140), 0x14ded905162a6a4b, 0x0, 0x0, 0x429) recvmmsg(r1, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)=""/255, 0xff}], 0x1}}], 0x1, 0x0, 0x0) recvfrom$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) keyctl$update(0x2, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvfrom(r1, &(0x7f0000001240)=""/4096, 0xffffff7e, 0x0, 0x0, 0x0) 04:24:21 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, 0x0, 0x0) 04:24:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x38, 0x0, 0x0) 04:24:21 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340), 0x0) 04:24:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 656.606260] FAULT_INJECTION: forcing a failure. [ 656.606260] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 656.634855] CPU: 0 PID: 31696 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 656.641817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 656.651174] Call Trace: [ 656.653774] dump_stack+0x172/0x1f0 [ 656.657423] should_fail.cold+0xa/0x15 [ 656.661348] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 656.666470] ? ___might_sleep+0x163/0x280 [ 656.671174] should_fail_alloc_page+0x50/0x60 [ 656.675684] __alloc_pages_nodemask+0x1a1/0x7e0 [ 656.680368] ? find_held_lock+0x35/0x130 [ 656.685224] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 656.692031] ? lock_downgrade+0x880/0x880 [ 656.696199] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 656.701747] alloc_pages_current+0x107/0x210 [ 656.706185] __get_free_pages+0xc/0x40 [ 656.710083] inode_doinit_with_dentry+0x6f6/0x1150 [ 656.715034] ? selinux_add_opt+0x2f0/0x2f0 [ 656.719276] ? ktime_get_coarse_real_ts64+0x1ba/0x2b0 [ 656.724498] selinux_d_instantiate+0x28/0x40 [ 656.728917] security_d_instantiate+0x5d/0x100 [ 656.733512] d_instantiate+0x60/0xa0 [ 656.737239] debugfs_create_dir+0x122/0x3d0 [ 656.741575] hci_register_dev+0x299/0x860 [ 656.745739] __vhci_create_device+0x2d0/0x5a0 [ 656.750249] vhci_write+0x2d0/0x470 [ 656.753890] __vfs_write+0x613/0x8e0 [ 656.757617] ? kernel_read+0x120/0x120 [ 656.761510] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 656.767071] ? rw_verify_area+0x118/0x360 [ 656.771226] vfs_write+0x20c/0x580 [ 656.774777] ksys_write+0xea/0x1f0 [ 656.778329] ? __ia32_sys_read+0xb0/0xb0 [ 656.782395] ? do_syscall_64+0x26/0x610 [ 656.786374] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.791738] ? do_syscall_64+0x26/0x610 [ 656.795724] __x64_sys_write+0x73/0xb0 [ 656.799948] do_syscall_64+0x103/0x610 [ 656.803864] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 656.809061] RIP: 0033:0x457f29 [ 656.812255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 656.831166] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 656.839296] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 656.846572] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 04:24:21 executing program 2: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x0, 0x0) ioctl$TCSBRKP(r0, 0x7b9, 0x0) [ 656.853857] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 656.861123] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 656.868414] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:24:21 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:21 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340), 0x0) 04:24:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:32 executing program 0 (fault-call:1 fault-nth:24): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:32 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000000000/0x9000)=nil, 0x9000, 0xe000, 0x3, &(0x7f0000ff2000/0xe000)=nil) 04:24:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:32 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340), 0x0) 04:24:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:32 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x39, 0x0, 0x0) 04:24:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 667.472134] FAULT_INJECTION: forcing a failure. [ 667.472134] name failslab, interval 1, probability 0, space 0, times 0 [ 667.493574] CPU: 1 PID: 31837 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 667.500544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 667.500552] Call Trace: [ 667.512510] dump_stack+0x172/0x1f0 [ 667.516160] should_fail.cold+0xa/0x15 [ 667.520067] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 667.525201] ? ___might_sleep+0x163/0x280 [ 667.529363] __should_failslab+0x121/0x190 [ 667.533613] should_failslab+0x9/0x14 [ 667.537426] __kmalloc_track_caller+0x2d8/0x740 [ 667.542115] ? __d_instantiate+0x383/0x470 [ 667.546361] ? find_held_lock+0x35/0x130 [ 667.550428] ? kstrdup_const+0x66/0x80 [ 667.554330] kstrdup+0x3a/0x70 [ 667.554350] kstrdup_const+0x66/0x80 [ 667.554367] kvasprintf_const+0x10e/0x190 [ 667.565418] kobject_set_name_vargs+0x5b/0x150 [ 667.570024] dev_set_name+0xbd/0xf0 [ 667.573659] ? device_initialize+0x440/0x440 [ 667.578098] hci_register_dev+0x2e0/0x860 [ 667.582264] __vhci_create_device+0x2d0/0x5a0 [ 667.586783] vhci_write+0x2d0/0x470 [ 667.586806] __vfs_write+0x613/0x8e0 [ 667.586826] ? kernel_read+0x120/0x120 [ 667.586841] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 667.586877] ? rw_verify_area+0x118/0x360 [ 667.586896] vfs_write+0x20c/0x580 [ 667.586916] ksys_write+0xea/0x1f0 [ 667.594247] ? __ia32_sys_read+0xb0/0xb0 [ 667.619032] ? do_syscall_64+0x26/0x610 [ 667.623017] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.628389] ? do_syscall_64+0x26/0x610 [ 667.632380] __x64_sys_write+0x73/0xb0 [ 667.636280] do_syscall_64+0x103/0x610 [ 667.640193] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 667.645392] RIP: 0033:0x457f29 [ 667.648588] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:24:32 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{0x0}], 0x1) 04:24:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:32 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$inet_mreqn(r2, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x40, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r1, r2, 0x0, 0x50000000000443) 04:24:32 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{0x0}], 0x1) [ 667.667497] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 667.675213] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 667.682495] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 667.689767] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 667.689777] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 667.689786] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:24:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 667.822700] Bluetooth: Can't register HCI device 04:24:32 executing program 0 (fault-call:1 fault-nth:25): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:32 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{0x0}], 0x1) 04:24:32 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 667.996632] FAULT_INJECTION: forcing a failure. [ 667.996632] name failslab, interval 1, probability 0, space 0, times 0 [ 668.008471] CPU: 0 PID: 31867 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 668.015409] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 668.024770] Call Trace: [ 668.027379] dump_stack+0x172/0x1f0 [ 668.031037] should_fail.cold+0xa/0x15 [ 668.034936] ? kernel_text_address+0x73/0xf0 [ 668.039407] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 668.044520] ? unwind_get_return_address+0x61/0xa0 [ 668.044538] ? __save_stack_trace+0x8a/0xf0 [ 668.044562] __should_failslab+0x121/0x190 [ 668.044596] should_failslab+0x9/0x14 [ 668.044618] kmem_cache_alloc+0x47/0x6f0 [ 668.065918] ? save_stack+0xa9/0xd0 [ 668.069559] ? save_stack+0x45/0xd0 [ 668.073205] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 668.073222] ? kasan_slab_alloc+0xf/0x20 [ 668.073244] radix_tree_node_alloc.constprop.0+0x1eb/0x340 [ 668.073265] idr_get_free+0x425/0x8d0 [ 668.073293] idr_alloc_u32+0x19e/0x330 [ 668.091843] ? __fprop_inc_percpu_max+0x230/0x230 [ 668.091863] ? mark_held_locks+0xf0/0xf0 [ 668.091878] ? perf_trace_lock+0x510/0x510 [ 668.091902] idr_alloc_cyclic+0x132/0x270 [ 668.091920] ? idr_alloc+0x150/0x150 [ 668.116750] __kernfs_new_node+0x171/0x690 [ 668.120998] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 668.125774] ? tick_nohz_tick_stopped+0x1a/0x90 [ 668.130444] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.135983] ? irq_work_queue+0x36/0x1d0 [ 668.140047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 668.145613] ? wake_up_klogd+0x99/0xd0 [ 668.149509] kernfs_new_node+0x99/0x130 [ 668.153493] kernfs_create_dir_ns+0x52/0x160 [ 668.157906] sysfs_create_dir_ns+0x131/0x2a0 [ 668.162334] ? sysfs_create_mount_point+0xa0/0xa0 [ 668.167223] ? class_dir_child_ns_type+0xd/0x60 [ 668.171898] kobject_add_internal.cold+0xe5/0x5d4 [ 668.176761] kobject_add+0x150/0x1c0 [ 668.180475] ? kset_create_and_add+0x1a0/0x1a0 [ 668.185058] ? kasan_check_read+0x11/0x20 [ 668.189211] ? mutex_unlock+0xd/0x10 [ 668.192942] device_add+0x3d5/0x18a0 [ 668.196660] ? device_initialize+0x440/0x440 [ 668.201069] ? get_device_parent.isra.0+0x570/0x570 [ 668.206096] ? start_creating+0x163/0x1e0 [ 668.210275] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 668.215820] hci_register_dev+0x2e8/0x860 [ 668.219970] __vhci_create_device+0x2d0/0x5a0 [ 668.224467] vhci_write+0x2d0/0x470 [ 668.228094] __vfs_write+0x613/0x8e0 [ 668.231828] ? kernel_read+0x120/0x120 [ 668.235713] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 668.241267] ? rw_verify_area+0x118/0x360 [ 668.245427] vfs_write+0x20c/0x580 [ 668.248989] ksys_write+0xea/0x1f0 [ 668.252531] ? __ia32_sys_read+0xb0/0xb0 [ 668.256601] ? do_syscall_64+0x26/0x610 [ 668.260585] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.265976] ? do_syscall_64+0x26/0x610 [ 668.269954] __x64_sys_write+0x73/0xb0 [ 668.273856] do_syscall_64+0x103/0x610 [ 668.277752] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 668.282941] RIP: 0033:0x457f29 [ 668.286138] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 668.305047] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 668.312781] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 668.320044] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 668.327316] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 668.334583] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 04:24:33 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) [ 668.341849] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:24:33 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x3a, 0x0, 0x0) 04:24:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:33 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000000)='\xfaIhFlK\x99F\x17\x16\xa5>\xd3\xc0\x93\xb5.\xda\x06_bT\x1cB\xdb\xf8y1\xe7,\x03\x98h\x86(\xa0m\x87+x\x14i\x88\xcd\x89\x81\xfb\x86', 0x0) write$apparmor_exec(r0, &(0x7f0000000040)={'stack ', 'bond_slave_0\x00'}, 0x13) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f00000000c0)='S', 0x1}], 0x1, 0x4081003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) fallocate(r0, 0x11, 0x0, 0x100000001) openat$fuse(0xffffffffffffff9c, &(0x7f0000000340)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000080)={'bond_slave_0\x00', {0x2, 0x0, @remote}}) ioctl$sock_inet6_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, 0x0) clock_nanosleep(0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000780)={{{@in=@multicast1, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @broadcast}}}, &(0x7f0000000880)=0xe8) lstat(&(0x7f00000008c0)='./file0\x00', &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getpgrp(0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000d80), &(0x7f0000000dc0)=0xc) gettid() fstat(r2, &(0x7f0000000f40)) sendmmsg$unix(r2, &(0x7f0000001080)=[{&(0x7f0000000080)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000400)=[{&(0x7f00000003c0)}], 0x1, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1, &(0x7f0000000980)=[@rights={0x18, 0x1, 0x1, [r2, r2]}, @cred={0x20, 0x1, 0x2, 0x0, r3, r4}], 0x38, 0x44000}], 0x2, 0x0) 04:24:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:33 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:43 executing program 0 (fault-call:1 fault-nth:26): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:43 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/69) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 04:24:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x3b, 0x0, 0x0) 04:24:43 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:44 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:24:44 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/69) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 04:24:44 executing program 2: r0 = open(&(0x7f0000000a00)='./file1\x00', 0x0, 0x0) mkdirat(r0, 0x0, 0x0) open(&(0x7f0000000340)='./file0/file0\x00', 0x0, 0x0) openat$smack_task_current(0xffffffffffffff9c, &(0x7f0000000940)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$SIOCNRDECOBS(0xffffffffffffffff, 0x89e2) socketpair$unix(0x1, 0x0, 0x0, 0x0) add_key(0x0, 0x0, &(0x7f0000000640)="9cb71e24b0bb6f50a6dc6f63c533eb6c27bd38be519d110af711f1d9d767021c8c92305618b8c5deb7b663f3bfee7695efc496f55c1f9437a4b6d16f38ad5be723ee066cd46431e0", 0x48, 0xfffffffffffffff9) syz_mount_image$hfs(0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)=ANY=[]) openat$cachefiles(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(0xffffffffffffffff, 0x84, 0x8, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff8) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="0000680000050000ffffffa6000000008128b14700000000d59863d20000000002000f2020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) write(r1, 0x0, 0xfffffffffffffd12) syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000000500)={0x3, 0x70, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x1, 0x6, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4f0e1827, 0x0, 0xff, 0x0, 0xad4f, 0x0, 0x2be, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, @perf_config_ext, 0x404}, 0x0, 0x0, 0xffffffffffffffff, 0x0) 04:24:44 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) [ 679.557982] loop2: p1 < > p4 [ 679.565828] loop2: partition table partially beyond EOD, truncated [ 679.603868] loop2: p1 size 2 extends beyond EOD, truncated [ 679.679671] loop2: p4 start 1854537728 is beyond EOD, truncated [ 679.698696] FAULT_INJECTION: forcing a failure. [ 679.698696] name failslab, interval 1, probability 0, space 0, times 0 [ 679.730305] CPU: 0 PID: 32649 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 679.737261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 679.746624] Call Trace: [ 679.749240] dump_stack+0x172/0x1f0 [ 679.752893] should_fail.cold+0xa/0x15 [ 679.756804] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 679.761925] ? ___might_sleep+0x163/0x280 [ 679.766092] __should_failslab+0x121/0x190 [ 679.770357] should_failslab+0x9/0x14 [ 679.774175] kmem_cache_alloc+0x2b2/0x6f0 [ 679.778344] ? memcpy+0x46/0x50 [ 679.781637] ? kstrdup+0x5a/0x70 [ 679.785015] __kernfs_new_node+0xef/0x690 [ 679.789173] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 679.794728] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 679.799498] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 679.804958] ? find_held_lock+0x35/0x130 [ 679.809025] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 679.814482] ? kasan_check_write+0x14/0x20 [ 679.818724] kernfs_new_node+0x99/0x130 [ 679.822707] kernfs_create_link+0xdd/0x250 [ 679.826946] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 679.832224] sysfs_create_link+0x65/0xc0 [ 679.836511] device_add+0x78f/0x18a0 [ 679.840234] ? get_device_parent.isra.0+0x570/0x570 [ 679.845250] ? start_creating+0x163/0x1e0 [ 679.849403] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 679.854944] hci_register_dev+0x2e8/0x860 [ 679.859101] __vhci_create_device+0x2d0/0x5a0 [ 679.863605] vhci_write+0x2d0/0x470 [ 679.867240] __vfs_write+0x613/0x8e0 [ 679.870960] ? kernel_read+0x120/0x120 [ 679.874854] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 679.880408] ? rw_verify_area+0x118/0x360 [ 679.884561] vfs_write+0x20c/0x580 [ 679.888116] ksys_write+0xea/0x1f0 [ 679.891660] ? __ia32_sys_read+0xb0/0xb0 [ 679.895740] ? do_syscall_64+0x26/0x610 [ 679.899716] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.905078] ? do_syscall_64+0x26/0x610 [ 679.909058] __x64_sys_write+0x73/0xb0 [ 679.912950] do_syscall_64+0x103/0x610 [ 679.916844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 679.922047] RIP: 0033:0x457f29 [ 679.925240] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 679.944139] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 679.951844] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 679.959136] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 679.966400] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 679.973666] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 679.980933] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 680.072958] Bluetooth: Can't register HCI device 04:24:45 executing program 0 (fault-call:1 fault-nth:27): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/69) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 04:24:45 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:24:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x3c, 0x0, 0x0) 04:24:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:24:45 executing program 2: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = gettid() socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmmsg(r2, &(0x7f0000007740)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000100)=""/46, 0x2e}], 0x1}}], 0x1, 0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x8}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1000000000016) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) [ 680.137473] __loop_clr_fd: partition scan of loop2 failed (rc=-22) [ 680.137960] print_req_error: 78 callbacks suppressed [ 680.137972] print_req_error: I/O error, dev loop2, sector 0 flags 80700 [ 680.187846] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.194337] buffer_io_error: 74 callbacks suppressed [ 680.194348] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.194530] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.206870] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.207049] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.220708] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.234706] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.241132] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.250269] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.256784] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.256995] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.257010] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.257144] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.285077] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.292563] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.299076] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.309864] FAULT_INJECTION: forcing a failure. [ 680.309864] name failslab, interval 1, probability 0, space 0, times 0 04:24:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) [ 680.339679] print_req_error: I/O error, dev loop2, sector 0 flags 0 [ 680.346704] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.364784] CPU: 0 PID: 32664 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 680.364911] Buffer I/O error on dev loop2p1, logical block 0, async page read [ 680.371736] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 680.371743] Call Trace: [ 680.371769] dump_stack+0x172/0x1f0 [ 680.371798] should_fail.cold+0xa/0x15 [ 680.398488] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 680.403604] ? ___might_sleep+0x163/0x280 [ 680.407759] __should_failslab+0x121/0x190 [ 680.411998] should_failslab+0x9/0x14 [ 680.415803] kmem_cache_alloc+0x2b2/0x6f0 [ 680.419945] ? memcpy+0x46/0x50 [ 680.423226] ? kstrdup+0x5a/0x70 [ 680.426602] __kernfs_new_node+0xef/0x690 [ 680.430751] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 680.436292] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 680.441063] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 680.446517] ? find_held_lock+0x35/0x130 [ 680.450582] ? sysfs_do_create_link_sd.isra.0+0x82/0x140 [ 680.456042] ? kasan_check_write+0x14/0x20 [ 680.460287] kernfs_new_node+0x99/0x130 [ 680.464279] kernfs_create_link+0xdd/0x250 [ 680.468545] sysfs_do_create_link_sd.isra.0+0x90/0x140 [ 680.473824] sysfs_create_link+0x65/0xc0 [ 680.477884] device_add+0x78f/0x18a0 [ 680.481611] ? get_device_parent.isra.0+0x570/0x570 [ 680.486624] ? start_creating+0x163/0x1e0 [ 680.490778] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 680.496332] hci_register_dev+0x2e8/0x860 [ 680.500495] __vhci_create_device+0x2d0/0x5a0 [ 680.504995] vhci_write+0x2d0/0x470 [ 680.508629] __vfs_write+0x613/0x8e0 [ 680.512354] ? kernel_read+0x120/0x120 [ 680.516239] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 680.521798] ? rw_verify_area+0x118/0x360 [ 680.525952] vfs_write+0x20c/0x580 [ 680.529518] ksys_write+0xea/0x1f0 [ 680.533060] ? __ia32_sys_read+0xb0/0xb0 [ 680.537122] ? do_syscall_64+0x26/0x610 [ 680.541150] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.546513] ? do_syscall_64+0x26/0x610 [ 680.550493] __x64_sys_write+0x73/0xb0 [ 680.554389] do_syscall_64+0x103/0x610 [ 680.558288] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 680.563487] RIP: 0033:0x457f29 [ 680.566681] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:24:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) [ 680.585593] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 680.593318] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 680.600592] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 680.607858] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 680.615127] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 680.622407] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 680.659356] Bluetooth: Can't register HCI device 04:24:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 04:24:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 04:24:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 04:24:45 executing program 0 (fault-call:1 fault-nth:28): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:24:45 executing program 1: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) gettid() sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000300)=""/69) r0 = socket$inet(0x2, 0x3, 0x19) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x23, 0x0, 0x0) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x1, [@loopback]}, 0x14) syz_emit_ethernet(0x2a, &(0x7f0000000240)={@link_local, @link_local={0x1, 0x80, 0xc2, 0x806, 0x1c000700}, [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @broadcast}, @igmp={0x11, 0x0, 0x0, @multicast1}}}}}, 0x0) 04:24:45 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x3d, 0x0, 0x0) [ 681.031401] FAULT_INJECTION: forcing a failure. [ 681.031401] name failslab, interval 1, probability 0, space 0, times 0 [ 681.121511] CPU: 1 PID: 422 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 681.128333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.137699] Call Trace: [ 681.140307] dump_stack+0x172/0x1f0 [ 681.143989] should_fail.cold+0xa/0x15 [ 681.147918] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 681.153045] ? ___might_sleep+0x163/0x280 [ 681.157206] __should_failslab+0x121/0x190 [ 681.161454] should_failslab+0x9/0x14 [ 681.165272] kmem_cache_alloc+0x2b2/0x6f0 [ 681.169451] __kernfs_new_node+0xef/0x690 [ 681.173616] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 681.178385] ? kernfs_activate+0x192/0x1f0 [ 681.182632] ? lock_downgrade+0x880/0x880 [ 681.186788] ? mutex_trylock+0x1e0/0x1e0 [ 681.190852] ? lock_downgrade+0x880/0x880 [ 681.195006] kernfs_new_node+0x99/0x130 [ 681.198992] kernfs_create_dir_ns+0x52/0x160 [ 681.203406] internal_create_group+0x7f8/0xc40 [ 681.208001] ? remove_files.isra.0+0x190/0x190 [ 681.212586] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.218123] ? kernfs_put+0x3e3/0x600 [ 681.221924] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.227465] ? kernfs_create_link+0x1d2/0x250 [ 681.231970] sysfs_create_group+0x20/0x30 [ 681.236123] dpm_sysfs_add+0x8b/0x270 [ 681.239922] device_add+0xa20/0x18a0 [ 681.243640] ? get_device_parent.isra.0+0x570/0x570 [ 681.248655] ? start_creating+0x163/0x1e0 [ 681.252805] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 681.258356] hci_register_dev+0x2e8/0x860 [ 681.262514] __vhci_create_device+0x2d0/0x5a0 [ 681.267017] vhci_write+0x2d0/0x470 [ 681.270650] __vfs_write+0x613/0x8e0 [ 681.274370] ? kernel_read+0x120/0x120 [ 681.278256] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.283830] ? rw_verify_area+0x118/0x360 [ 681.287983] vfs_write+0x20c/0x580 [ 681.291529] ksys_write+0xea/0x1f0 [ 681.295075] ? __ia32_sys_read+0xb0/0xb0 [ 681.299148] ? do_syscall_64+0x26/0x610 [ 681.303124] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.308490] ? do_syscall_64+0x26/0x610 [ 681.312471] __x64_sys_write+0x73/0xb0 [ 681.316362] do_syscall_64+0x103/0x610 [ 681.320271] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.325458] RIP: 0033:0x457f29 [ 681.328650] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.347555] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 681.355266] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 681.362532] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 04:24:46 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 681.369802] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 681.377067] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 681.384343] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 04:24:46 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x3e, 0x0, 0x0) 04:24:46 executing program 1 (fault-call:1 fault-nth:0): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 681.486351] FAULT_INJECTION: forcing a failure. [ 681.486351] name failslab, interval 1, probability 0, space 0, times 0 [ 681.491226] Bluetooth: Can't register HCI device [ 681.545139] CPU: 1 PID: 438 Comm: syz-executor.3 Not tainted 5.0.0+ #11 [ 681.551946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.561309] Call Trace: [ 681.563920] dump_stack+0x172/0x1f0 [ 681.567574] should_fail.cold+0xa/0x15 [ 681.571488] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 681.576624] ? ___might_sleep+0x163/0x280 [ 681.580791] __should_failslab+0x121/0x190 [ 681.585047] should_failslab+0x9/0x14 [ 681.588864] __kmalloc+0x2dc/0x740 04:24:46 executing program 0 (fault-call:1 fault-nth:29): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 681.592412] ? __might_fault+0x12b/0x1e0 [ 681.596484] ? snd_ctl_new+0x5b/0x1b0 [ 681.600304] snd_ctl_new+0x5b/0x1b0 [ 681.603968] snd_ctl_elem_add+0x544/0x13e0 [ 681.608233] ? snd_ctl_new1+0x6a0/0x6a0 [ 681.612224] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 681.617772] ? _copy_from_user+0xdd/0x150 [ 681.621938] snd_ctl_elem_add_user+0xc6/0x180 [ 681.626451] ? snd_ctl_elem_add_compat+0x3f0/0x3f0 [ 681.631430] ? __lock_acquire+0x548/0x3fb0 [ 681.635679] ? refcount_dec_and_test_checked+0x1b/0x20 04:24:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 681.640974] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.646520] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.652069] ? debug_smp_processor_id+0x3c/0x280 [ 681.652099] snd_ctl_ioctl+0x937/0xf50 [ 681.652117] ? snd_ctl_elem_add_user+0x180/0x180 [ 681.665509] ? ___might_sleep+0x163/0x280 [ 681.666143] FAULT_INJECTION: forcing a failure. [ 681.666143] name failslab, interval 1, probability 0, space 0, times 0 [ 681.669670] ? __might_sleep+0x95/0x190 [ 681.669687] ? lock_downgrade+0x880/0x880 [ 681.669706] ? snd_ctl_elem_add_user+0x180/0x180 [ 681.669724] do_vfs_ioctl+0xd6e/0x1390 [ 681.700365] ? selinux_file_ioctl+0x46f/0x5e0 [ 681.704873] ? selinux_file_ioctl+0x125/0x5e0 [ 681.709384] ? ioctl_preallocate+0x210/0x210 [ 681.713798] ? selinux_file_mprotect+0x620/0x620 [ 681.718570] ? ksys_dup3+0x3e0/0x3e0 [ 681.722291] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.727843] ? fput+0x128/0x1a0 [ 681.731138] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 681.736686] ? security_file_ioctl+0x93/0xc0 [ 681.741115] ksys_ioctl+0xab/0xd0 [ 681.744612] __x64_sys_ioctl+0x73/0xb0 [ 681.748515] do_syscall_64+0x103/0x610 [ 681.752421] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.757624] RIP: 0033:0x457f29 [ 681.760833] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 681.779737] RSP: 002b:00007fc80c16ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 681.787452] RAX: ffffffffffffffda RBX: 00007fc80c16ac90 RCX: 0000000000457f29 [ 681.794729] RDX: 0000000020001000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 681.802493] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 681.809762] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc80c16b6d4 [ 681.817035] R13: 00000000004ca7a0 R14: 00000000004d4200 R15: 0000000000000004 [ 681.824364] CPU: 0 PID: 447 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 681.831137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 681.840492] Call Trace: [ 681.843090] dump_stack+0x172/0x1f0 [ 681.846739] should_fail.cold+0xa/0x15 [ 681.850644] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 681.855763] ? ___might_sleep+0x163/0x280 [ 681.859919] __should_failslab+0x121/0x190 [ 681.864164] should_failslab+0x9/0x14 [ 681.867977] kmem_cache_alloc+0x2b2/0x6f0 [ 681.872146] __kernfs_new_node+0xef/0x690 [ 681.876307] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 681.881095] ? lock_downgrade+0x880/0x880 [ 681.885265] ? mutex_trylock+0x1e0/0x1e0 [ 681.885286] kernfs_new_node+0x99/0x130 [ 681.885307] __kernfs_create_file+0x51/0x340 [ 681.893337] sysfs_add_file_mode_ns+0x222/0x560 [ 681.902401] sysfs_merge_group+0x1a0/0x340 [ 681.906653] ? sysfs_mount+0x1e0/0x1e0 [ 681.910545] ? kernfs_put+0x3e3/0x600 [ 681.914373] dpm_sysfs_add+0x21d/0x270 [ 681.918275] device_add+0xa20/0x18a0 [ 681.922005] ? get_device_parent.isra.0+0x570/0x570 [ 681.927036] ? start_creating+0x163/0x1e0 [ 681.931202] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 681.936751] hci_register_dev+0x2e8/0x860 [ 681.936778] __vhci_create_device+0x2d0/0x5a0 [ 681.936801] vhci_write+0x2d0/0x470 [ 681.945435] __vfs_write+0x613/0x8e0 [ 681.945456] ? kernel_read+0x120/0x120 [ 681.945472] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 681.945508] ? rw_verify_area+0x118/0x360 [ 681.966367] vfs_write+0x20c/0x580 [ 681.969938] ksys_write+0xea/0x1f0 [ 681.973493] ? __ia32_sys_read+0xb0/0xb0 [ 681.977334] FAULT_INJECTION: forcing a failure. [ 681.977334] name failslab, interval 1, probability 0, space 0, times 0 [ 681.977578] ? do_syscall_64+0x26/0x610 [ 681.992728] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 681.998106] ? do_syscall_64+0x26/0x610 [ 682.002106] __x64_sys_write+0x73/0xb0 [ 682.006013] do_syscall_64+0x103/0x610 [ 682.009919] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.015110] RIP: 0033:0x457f29 [ 682.018305] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.037221] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 04:24:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x20000043}], 0x1) 04:24:46 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 682.044934] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 682.052216] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 682.059490] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.066761] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 682.074058] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 682.081457] CPU: 1 PID: 457 Comm: syz-executor.3 Not tainted 5.0.0+ #11 [ 682.088229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.097583] Call Trace: [ 682.100184] dump_stack+0x172/0x1f0 [ 682.103821] should_fail.cold+0xa/0x15 [ 682.107721] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 682.112838] ? ___might_sleep+0x163/0x280 [ 682.112860] __should_failslab+0x121/0x190 [ 682.112880] should_failslab+0x9/0x14 [ 682.125025] __kmalloc+0x2dc/0x740 [ 682.125046] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 682.125063] ? snd_ctl_new+0x151/0x1b0 [ 682.125078] ? snd_ctl_elem_add+0x58f/0x13e0 [ 682.125105] snd_ctl_elem_add+0x58f/0x13e0 04:24:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:47 executing program 4 (fault-call:5 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 682.125159] ? snd_ctl_new1+0x6a0/0x6a0 [ 682.125178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 682.125192] ? _copy_from_user+0xdd/0x150 [ 682.125214] snd_ctl_elem_add_user+0xc6/0x180 [ 682.142141] Bluetooth: Can't register HCI device [ 682.146251] ? snd_ctl_elem_add_compat+0x3f0/0x3f0 [ 682.146303] ? __lock_acquire+0x548/0x3fb0 [ 682.146329] ? refcount_dec_and_test_checked+0x1b/0x20 [ 682.146344] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.146359] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.146377] ? debug_smp_processor_id+0x3c/0x280 [ 682.146395] snd_ctl_ioctl+0x937/0xf50 [ 682.155895] ? snd_ctl_elem_add_user+0x180/0x180 [ 682.155916] ? ___might_sleep+0x163/0x280 [ 682.155936] ? __might_sleep+0x95/0x190 [ 682.155950] ? lock_downgrade+0x880/0x880 [ 682.155967] ? snd_ctl_elem_add_user+0x180/0x180 [ 682.155985] do_vfs_ioctl+0xd6e/0x1390 [ 682.156002] ? selinux_file_ioctl+0x46f/0x5e0 [ 682.156018] ? selinux_file_ioctl+0x125/0x5e0 [ 682.156038] ? ioctl_preallocate+0x210/0x210 [ 682.169419] ? selinux_file_mprotect+0x620/0x620 [ 682.169445] ? ksys_dup3+0x3e0/0x3e0 [ 682.169463] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.169479] ? fput+0x128/0x1a0 [ 682.169498] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.178638] ? security_file_ioctl+0x93/0xc0 [ 682.178657] ksys_ioctl+0xab/0xd0 [ 682.178678] __x64_sys_ioctl+0x73/0xb0 [ 682.178699] do_syscall_64+0x103/0x610 [ 682.178723] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.178735] RIP: 0033:0x457f29 [ 682.178754] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.178762] RSP: 002b:00007fc80c16ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.178777] RAX: ffffffffffffffda RBX: 00007fc80c16ac90 RCX: 0000000000457f29 [ 682.178795] RDX: 0000000020001000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 682.178803] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.178812] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc80c16b6d4 04:24:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x41, 0x0, 0x0) 04:24:47 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:47 executing program 3 (fault-call:3 fault-nth:2): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:47 executing program 0 (fault-call:1 fault-nth:30): r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 682.178820] R13: 00000000004ca7a0 R14: 00000000004d4200 R15: 0000000000000004 [ 682.403112] FAULT_INJECTION: forcing a failure. [ 682.403112] name failslab, interval 1, probability 0, space 0, times 0 [ 682.419249] CPU: 1 PID: 463 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 682.426029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.435389] Call Trace: [ 682.437998] dump_stack+0x172/0x1f0 [ 682.441651] should_fail.cold+0xa/0x15 [ 682.441693] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 682.450600] FAULT_INJECTION: forcing a failure. [ 682.450600] name failslab, interval 1, probability 0, space 0, times 0 [ 682.450663] ? ___might_sleep+0x163/0x280 [ 682.465973] __should_failslab+0x121/0x190 [ 682.470225] should_failslab+0x9/0x14 [ 682.474038] kmem_cache_alloc+0x2b2/0x6f0 [ 682.478203] ? mark_held_locks+0xf0/0xf0 [ 682.482279] mmu_topup_memory_caches+0x97/0x490 [ 682.486965] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.492512] kvm_mmu_load+0x21/0x1300 [ 682.496335] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 682.501274] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.506824] ? debug_smp_processor_id+0x3c/0x280 [ 682.511595] vcpu_enter_guest+0x3c8d/0x60b0 [ 682.515927] ? mark_held_locks+0xf0/0xf0 [ 682.519993] ? perf_trace_lock+0x510/0x510 [ 682.524243] ? emulator_read_emulated+0x50/0x50 [ 682.528919] ? lock_acquire+0x16f/0x3f0 [ 682.532901] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 682.537935] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 682.542785] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 682.547823] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 682.551805] ? kvm_vcpu_block+0xcd0/0xcd0 [ 682.555965] ? __lock_acquire+0x548/0x3fb0 [ 682.560209] ? refcount_dec_and_test_checked+0x1b/0x20 [ 682.565494] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.571033] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.576579] ? debug_smp_processor_id+0x3c/0x280 [ 682.581374] ? __fget+0x340/0x540 [ 682.584873] ? find_held_lock+0x35/0x130 [ 682.588939] ? __fget+0x340/0x540 [ 682.592413] ? lock_downgrade+0x880/0x880 [ 682.596570] ? kvm_vcpu_block+0xcd0/0xcd0 [ 682.600724] do_vfs_ioctl+0xd6e/0x1390 [ 682.604624] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.610170] ? selinux_file_ioctl+0x125/0x5e0 [ 682.614672] ? ioctl_preallocate+0x210/0x210 [ 682.619096] ? selinux_file_mprotect+0x620/0x620 [ 682.623868] ? ksys_dup3+0x3e0/0x3e0 [ 682.627597] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.633140] ? fput+0x128/0x1a0 [ 682.636433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 682.641973] ? security_file_ioctl+0x93/0xc0 [ 682.646396] ksys_ioctl+0xab/0xd0 [ 682.649858] __x64_sys_ioctl+0x73/0xb0 [ 682.653754] do_syscall_64+0x103/0x610 [ 682.657662] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.662857] RIP: 0033:0x457f29 [ 682.666056] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.685166] RSP: 002b:00007fb83e86bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 682.692881] RAX: ffffffffffffffda RBX: 00007fb83e86bc90 RCX: 0000000000457f29 [ 682.700154] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 682.707426] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.714700] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e86c6d4 [ 682.721972] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 [ 682.729273] CPU: 0 PID: 471 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 682.736053] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 682.738364] FAULT_INJECTION: forcing a failure. [ 682.738364] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 682.745411] Call Trace: [ 682.759775] dump_stack+0x172/0x1f0 [ 682.763413] should_fail.cold+0xa/0x15 [ 682.767308] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 682.772427] ? ___might_sleep+0x163/0x280 [ 682.776595] __should_failslab+0x121/0x190 [ 682.780833] should_failslab+0x9/0x14 [ 682.784634] kmem_cache_alloc+0x2b2/0x6f0 [ 682.788785] ? lock_downgrade+0x880/0x880 [ 682.792943] __kernfs_new_node+0xef/0x690 [ 682.797099] ? kernfs_dop_revalidate+0x3c0/0x3c0 [ 682.802106] ? wait_for_completion+0x440/0x440 [ 682.806702] ? mutex_unlock+0xd/0x10 [ 682.810416] ? kernfs_activate+0x192/0x1f0 [ 682.814655] kernfs_new_node+0x99/0x130 [ 682.818638] __kernfs_create_file+0x51/0x340 [ 682.823055] sysfs_add_file_mode_ns+0x222/0x560 [ 682.827734] sysfs_merge_group+0x1a0/0x340 [ 682.831983] ? sysfs_mount+0x1e0/0x1e0 [ 682.835873] ? kernfs_put+0x3e3/0x600 [ 682.839688] dpm_sysfs_add+0x21d/0x270 [ 682.843578] device_add+0xa20/0x18a0 [ 682.847303] ? get_device_parent.isra.0+0x570/0x570 [ 682.852334] ? start_creating+0x163/0x1e0 [ 682.856491] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 682.862034] hci_register_dev+0x2e8/0x860 [ 682.866194] __vhci_create_device+0x2d0/0x5a0 [ 682.870696] vhci_write+0x2d0/0x470 [ 682.874342] __vfs_write+0x613/0x8e0 [ 682.878069] ? kernel_read+0x120/0x120 [ 682.881961] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 682.887533] ? rw_verify_area+0x118/0x360 [ 682.891691] vfs_write+0x20c/0x580 [ 682.895242] ksys_write+0xea/0x1f0 [ 682.898785] ? __ia32_sys_read+0xb0/0xb0 [ 682.902848] ? do_syscall_64+0x26/0x610 [ 682.906825] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.912194] ? do_syscall_64+0x26/0x610 [ 682.916178] __x64_sys_write+0x73/0xb0 [ 682.920075] do_syscall_64+0x103/0x610 [ 682.923978] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 682.929173] RIP: 0033:0x457f29 [ 682.932373] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 682.951283] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 682.959062] RAX: ffffffffffffffda RBX: 00007fc05e37dc90 RCX: 0000000000457f29 [ 682.966344] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000003 [ 682.973620] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 682.980900] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 682.988177] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 0000000000000004 [ 682.995484] CPU: 1 PID: 473 Comm: syz-executor.3 Not tainted 5.0.0+ #11 [ 683.002251] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.011611] Call Trace: [ 683.014212] dump_stack+0x172/0x1f0 [ 683.017852] should_fail.cold+0xa/0x15 [ 683.017869] ? __lock_acquire+0x548/0x3fb0 [ 683.017890] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 683.017907] ? __lock_acquire+0x548/0x3fb0 [ 683.017925] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.017948] should_fail_alloc_page+0x50/0x60 [ 683.040924] __alloc_pages_nodemask+0x1a1/0x7e0 [ 683.040949] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 683.040963] ? find_held_lock+0x35/0x130 [ 683.040987] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.041008] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 683.041028] cache_grow_begin+0x9c/0x860 [ 683.055185] ? snd_ctl_elem_add+0x58f/0x13e0 [ 683.055203] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 683.055225] __kmalloc+0x67f/0x740 [ 683.055243] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 683.055261] ? snd_ctl_elem_add+0x58f/0x13e0 [ 683.055280] snd_ctl_elem_add+0x58f/0x13e0 [ 683.055304] ? snd_ctl_new1+0x6a0/0x6a0 [ 683.055333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 683.055348] ? _copy_from_user+0xdd/0x150 [ 683.055369] snd_ctl_elem_add_user+0xc6/0x180 [ 683.055385] ? snd_ctl_elem_add_compat+0x3f0/0x3f0 [ 683.064999] ? __lock_acquire+0x548/0x3fb0 [ 683.065016] ? refcount_dec_and_test_checked+0x1b/0x20 [ 683.065031] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.065047] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.065063] ? debug_smp_processor_id+0x3c/0x280 [ 683.065083] snd_ctl_ioctl+0x937/0xf50 [ 683.065110] ? snd_ctl_elem_add_user+0x180/0x180 [ 683.065130] ? ___might_sleep+0x163/0x280 [ 683.065149] ? __might_sleep+0x95/0x190 [ 683.065166] ? lock_downgrade+0x880/0x880 [ 683.078715] ? snd_ctl_elem_add_user+0x180/0x180 [ 683.078736] do_vfs_ioctl+0xd6e/0x1390 [ 683.078754] ? selinux_file_ioctl+0x46f/0x5e0 [ 683.078770] ? selinux_file_ioctl+0x125/0x5e0 [ 683.078788] ? ioctl_preallocate+0x210/0x210 [ 683.078803] ? selinux_file_mprotect+0x620/0x620 [ 683.078827] ? ksys_dup3+0x3e0/0x3e0 04:24:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x56ea832308893739, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 683.087891] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.087909] ? fput+0x128/0x1a0 [ 683.087931] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.087947] ? security_file_ioctl+0x93/0xc0 [ 683.087966] ksys_ioctl+0xab/0xd0 [ 683.087986] __x64_sys_ioctl+0x73/0xb0 [ 683.097391] do_syscall_64+0x103/0x610 [ 683.097416] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.097429] RIP: 0033:0x457f29 [ 683.097445] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.097454] RSP: 002b:00007fc80c16ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 683.097469] RAX: ffffffffffffffda RBX: 00007fc80c16ac90 RCX: 0000000000457f29 [ 683.097478] RDX: 0000000020001000 RSI: 00000000c1105517 RDI: 0000000000000003 [ 683.097487] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 683.097497] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc80c16b6d4 [ 683.097506] R13: 00000000004ca7a0 R14: 00000000004d4200 R15: 0000000000000004 04:24:48 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 683.106789] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 683.258582] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 683.316042] Bluetooth: Can't register HCI device 04:24:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x42, 0x0, 0x0) 04:24:48 executing program 4 (fault-call:5 fault-nth:1): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:48 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x7ffff000}], 0x1) 04:24:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:48 executing program 3 (fault-call:3 fault-nth:3): r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 683.593421] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 683.615904] FAULT_INJECTION: forcing a failure. [ 683.615904] name failslab, interval 1, probability 0, space 0, times 0 [ 683.632227] CPU: 0 PID: 593 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 683.639007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 683.648360] Call Trace: [ 683.650970] dump_stack+0x172/0x1f0 [ 683.654619] should_fail.cold+0xa/0x15 [ 683.658532] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 683.663649] ? ___might_sleep+0x163/0x280 [ 683.667809] __should_failslab+0x121/0x190 [ 683.672288] should_failslab+0x9/0x14 [ 683.676098] kmem_cache_alloc+0x2b2/0x6f0 [ 683.680260] mmu_topup_memory_caches+0x97/0x490 [ 683.684929] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.690473] kvm_mmu_load+0x21/0x1300 [ 683.694298] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 683.699237] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.704776] ? debug_smp_processor_id+0x3c/0x280 [ 683.709544] vcpu_enter_guest+0x3c8d/0x60b0 [ 683.713865] ? mark_held_locks+0xf0/0xf0 [ 683.717924] ? perf_trace_lock+0x510/0x510 [ 683.722167] ? emulator_read_emulated+0x50/0x50 [ 683.726838] ? lock_acquire+0x16f/0x3f0 [ 683.730808] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 683.735830] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 683.740676] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 683.745703] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 683.749681] ? kvm_vcpu_block+0xcd0/0xcd0 [ 683.753827] ? __lock_acquire+0x548/0x3fb0 [ 683.758062] ? refcount_dec_and_test_checked+0x1b/0x20 [ 683.763341] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.768877] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.774414] ? debug_smp_processor_id+0x3c/0x280 [ 683.779182] ? __fget+0x340/0x540 [ 683.782633] ? find_held_lock+0x35/0x130 [ 683.786692] ? __fget+0x340/0x540 [ 683.790148] ? lock_downgrade+0x880/0x880 [ 683.794300] ? kvm_vcpu_block+0xcd0/0xcd0 [ 683.798462] do_vfs_ioctl+0xd6e/0x1390 [ 683.802355] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.807892] ? selinux_file_ioctl+0x125/0x5e0 [ 683.812389] ? ioctl_preallocate+0x210/0x210 [ 683.816799] ? selinux_file_mprotect+0x620/0x620 [ 683.821564] ? ksys_dup3+0x3e0/0x3e0 [ 683.825285] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 683.830832] ? fput+0x128/0x1a0 [ 683.834117] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 683.839665] ? security_file_ioctl+0x93/0xc0 [ 683.844091] ksys_ioctl+0xab/0xd0 [ 683.847565] __x64_sys_ioctl+0x73/0xb0 [ 683.851473] do_syscall_64+0x103/0x610 [ 683.855375] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 683.860568] RIP: 0033:0x457f29 [ 683.863770] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 683.882760] RSP: 002b:00007fb83e86bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 04:24:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 683.890479] RAX: ffffffffffffffda RBX: 00007fb83e86bc90 RCX: 0000000000457f29 [ 683.897750] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 683.905018] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 683.912281] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e86c6d4 [ 683.919546] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:24:48 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:48 executing program 4 (fault-call:5 fault-nth:2): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x2, &(0x7f0000001000)) 04:24:49 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4b47, &(0x7f0000001000)) [ 684.170893] FAULT_INJECTION: forcing a failure. [ 684.170893] name failslab, interval 1, probability 0, space 0, times 0 [ 684.234106] CPU: 1 PID: 619 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 684.240908] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 684.250266] Call Trace: [ 684.252875] dump_stack+0x172/0x1f0 [ 684.256532] should_fail.cold+0xa/0x15 [ 684.260446] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 684.265567] ? ___might_sleep+0x163/0x280 [ 684.269735] __should_failslab+0x121/0x190 [ 684.274001] should_failslab+0x9/0x14 [ 684.277813] kmem_cache_alloc+0x2b2/0x6f0 [ 684.281986] mmu_topup_memory_caches+0x97/0x490 [ 684.286663] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 684.292213] kvm_mmu_load+0x21/0x1300 [ 684.296027] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 684.300964] ? vcpu_enter_guest+0x2a33/0x60b0 [ 684.305496] ? lockdep_hardirqs_on+0x418/0x5d0 [ 684.310099] vcpu_enter_guest+0x3c8d/0x60b0 [ 684.314442] ? emulator_read_emulated+0x50/0x50 [ 684.319130] ? lock_acquire+0x16f/0x3f0 [ 684.323117] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 684.328154] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 684.333011] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 684.338049] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 684.342041] ? kvm_vcpu_block+0xcd0/0xcd0 [ 684.346207] ? __lock_acquire+0x548/0x3fb0 [ 684.350451] ? refcount_dec_and_test_checked+0x1b/0x20 [ 684.355737] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 684.361286] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 684.366852] ? debug_smp_processor_id+0x3c/0x280 [ 684.371630] ? __fget+0x340/0x540 [ 684.375104] ? find_held_lock+0x35/0x130 [ 684.379176] ? __fget+0x340/0x540 [ 684.382642] ? lock_downgrade+0x880/0x880 [ 684.386800] ? kvm_vcpu_block+0xcd0/0xcd0 [ 684.390961] do_vfs_ioctl+0xd6e/0x1390 [ 684.394856] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 684.400400] ? selinux_file_ioctl+0x125/0x5e0 [ 684.404905] ? ioctl_preallocate+0x210/0x210 [ 684.409332] ? selinux_file_mprotect+0x620/0x620 [ 684.414113] ? ksys_dup3+0x3e0/0x3e0 [ 684.417835] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 684.423386] ? fput+0x128/0x1a0 [ 684.426680] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 684.432231] ? security_file_ioctl+0x93/0xc0 [ 684.436656] ksys_ioctl+0xab/0xd0 [ 684.440137] __x64_sys_ioctl+0x73/0xb0 [ 684.444035] do_syscall_64+0x103/0x610 [ 684.447949] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 684.453156] RIP: 0033:0x457f29 [ 684.456383] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 684.475327] RSP: 002b:00007fb83e84ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 684.483053] RAX: ffffffffffffffda RBX: 00007fb83e84ac90 RCX: 0000000000457f29 [ 684.490354] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 684.497624] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 684.504892] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e84b6d4 [ 684.512208] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:24:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:24:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x2) 04:24:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4b49, &(0x7f0000001000)) 04:24:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x43, 0x0, 0x0) 04:24:58 executing program 4 (fault-call:5 fault-nth:3): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x541b, &(0x7f0000001000)) 04:24:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x8) 04:24:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:24:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3}, 0x2) [ 693.756273] FAULT_INJECTION: forcing a failure. [ 693.756273] name failslab, interval 1, probability 0, space 0, times 0 [ 693.831322] CPU: 1 PID: 733 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 693.838142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 693.847512] Call Trace: [ 693.850134] dump_stack+0x172/0x1f0 [ 693.853783] should_fail.cold+0xa/0x15 [ 693.857693] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 693.862853] ? ___might_sleep+0x163/0x280 [ 693.867031] __should_failslab+0x121/0x190 [ 693.871285] should_failslab+0x9/0x14 [ 693.875103] kmem_cache_alloc+0x2b2/0x6f0 [ 693.879269] mmu_topup_memory_caches+0x97/0x490 [ 693.883974] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.889523] kvm_mmu_load+0x21/0x1300 [ 693.893337] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 693.898278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.903827] ? debug_smp_processor_id+0x3c/0x280 [ 693.908603] vcpu_enter_guest+0x3c8d/0x60b0 [ 693.912935] ? mark_held_locks+0xf0/0xf0 [ 693.917008] ? perf_trace_lock+0x510/0x510 [ 693.921266] ? emulator_read_emulated+0x50/0x50 [ 693.925952] ? lock_acquire+0x16f/0x3f0 [ 693.929936] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 693.934973] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 693.939825] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 693.944861] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 693.948845] ? kvm_vcpu_block+0xcd0/0xcd0 [ 693.953001] ? __lock_acquire+0x548/0x3fb0 [ 693.957244] ? refcount_dec_and_test_checked+0x1b/0x20 [ 693.962534] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 693.968083] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.973646] ? debug_smp_processor_id+0x3c/0x280 [ 693.978421] ? __fget+0x340/0x540 [ 693.981904] ? find_held_lock+0x35/0x130 [ 693.985975] ? __fget+0x340/0x540 [ 693.989440] ? lock_downgrade+0x880/0x880 [ 693.993598] ? kvm_vcpu_block+0xcd0/0xcd0 [ 693.993618] do_vfs_ioctl+0xd6e/0x1390 [ 693.993635] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 693.993654] ? selinux_file_ioctl+0x125/0x5e0 [ 694.001679] ? ioctl_preallocate+0x210/0x210 [ 694.001697] ? selinux_file_mprotect+0x620/0x620 [ 694.001723] ? ksys_dup3+0x3e0/0x3e0 [ 694.024593] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 694.030146] ? fput+0x128/0x1a0 [ 694.033445] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.038992] ? security_file_ioctl+0x93/0xc0 [ 694.043414] ksys_ioctl+0xab/0xd0 [ 694.046879] __x64_sys_ioctl+0x73/0xb0 [ 694.050780] do_syscall_64+0x103/0x610 [ 694.054690] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.059886] RIP: 0033:0x457f29 [ 694.063087] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:24:58 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:24:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4}, 0x2) 04:24:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5421, &(0x7f0000001000)) 04:24:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x300) 04:24:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x5}, 0x2) 04:24:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffff9c, 0x0, 0x8, &(0x7f00000000c0)={0x0, @dev, @loopback}, &(0x7f0000000100)=0xc) r2 = getuid() setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000340)={{{@in6=@remote, @in=@empty, 0x4e20, 0x6, 0x4e23, 0x0, 0xa, 0xa0, 0x20, 0x16, r1, r2}, {0x1, 0xb5, 0x3, 0x4, 0x40, 0x7fffffff, 0x0, 0x3}, {0x1, 0x4, 0xea13}, 0x8001, 0x6e6bba, 0x2, 0x1, 0x2, 0x3}, {{@in6=@empty, 0x4d3, 0x6c}, 0x2, @in=@dev={0xac, 0x14, 0x14, 0xf}, 0x0, 0x0, 0x1, 0xc252, 0x1, 0x6}}, 0xe8) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='gid_map\x00') getsockopt$IP6T_SO_GET_ENTRIES(r3, 0x29, 0x41, &(0x7f0000000240)=ANY=[@ANYBLOB="7261770000000000000000000000000000000000000000000000000000000000a90000008426b4579c806539e238ac069a4fa0d1f371921964fd614392aa16f9f89186f51e16a459c3336c659c51318e274ad05655b79ba964d7497c36c5dcfce388cc7fb4b477cc8df164efc62e9e3240b19940c542d9f26d894c2999970a19334ebae7927b647b218f54198a3f26e2176ea61e8a07372c2c1c5c51c75fefaa6780e5f852784ea1cc1efd21f855c95f31f2264e44f7f6a0b76a165412b282009a07cfff65db05a33f1c38778adb3be75f6d16b2b1fa91340705"], &(0x7f0000000200)=0xcd) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f0000000140)=""/125) [ 694.082016] RSP: 002b:00007fb83e86bc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.089731] RAX: ffffffffffffffda RBX: 00007fb83e86bc90 RCX: 0000000000457f29 [ 694.097005] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 694.104285] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 694.111564] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e86c6d4 [ 694.118841] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:24:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x44, 0x0, 0x0) 04:24:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5450, &(0x7f0000001000)) 04:24:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:24:59 executing program 4 (fault-call:5 fault-nth:4): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:24:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6}, 0x2) 04:24:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x80801, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000140)={{0x2, 0x7}, 'port0\x00', 0x2, 0x40024, 0x6, 0x5, 0xe1c1, 0x3, 0xa476, 0x0, 0x0, 0x2}) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:24:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x7}, 0x2) 04:24:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5451, &(0x7f0000001000)) 04:24:59 executing program 2: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) [ 694.635043] FAULT_INJECTION: forcing a failure. [ 694.635043] name failslab, interval 1, probability 0, space 0, times 0 04:24:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x1, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 694.702865] CPU: 1 PID: 995 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 694.709664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 694.719025] Call Trace: [ 694.721627] dump_stack+0x172/0x1f0 [ 694.725279] should_fail.cold+0xa/0x15 [ 694.729177] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 694.734298] ? ___might_sleep+0x163/0x280 [ 694.738473] __should_failslab+0x121/0x190 [ 694.742719] should_failslab+0x9/0x14 [ 694.746532] kmem_cache_alloc+0x2b2/0x6f0 [ 694.750700] mmu_topup_memory_caches+0x97/0x490 [ 694.755378] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 694.760928] kvm_mmu_load+0x21/0x1300 [ 694.764743] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 694.764760] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.764779] ? debug_smp_processor_id+0x3c/0x280 [ 694.764806] vcpu_enter_guest+0x3c8d/0x60b0 [ 694.764822] ? mark_held_locks+0xf0/0xf0 [ 694.775280] ? perf_trace_lock+0x510/0x510 [ 694.775308] ? emulator_read_emulated+0x50/0x50 [ 694.775336] ? lock_acquire+0x16f/0x3f0 [ 694.775353] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 694.775375] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 694.806839] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 694.806870] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 694.806889] ? kvm_vcpu_block+0xcd0/0xcd0 [ 694.806908] ? __lock_acquire+0x548/0x3fb0 [ 694.829069] ? refcount_dec_and_test_checked+0x1b/0x20 [ 694.834371] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 694.839919] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.839939] ? debug_smp_processor_id+0x3c/0x280 [ 694.839962] ? __fget+0x340/0x540 [ 694.853704] ? find_held_lock+0x35/0x130 [ 694.857780] ? __fget+0x340/0x540 [ 694.861245] ? lock_downgrade+0x880/0x880 [ 694.865406] ? kvm_vcpu_block+0xcd0/0xcd0 [ 694.869569] do_vfs_ioctl+0xd6e/0x1390 [ 694.873470] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.879019] ? selinux_file_ioctl+0x125/0x5e0 [ 694.883534] ? ioctl_preallocate+0x210/0x210 [ 694.887954] ? selinux_file_mprotect+0x620/0x620 [ 694.892731] ? ksys_dup3+0x3e0/0x3e0 [ 694.896469] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 694.902022] ? fput+0x128/0x1a0 [ 694.905321] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 694.910880] ? security_file_ioctl+0x93/0xc0 [ 694.915303] ksys_ioctl+0xab/0xd0 [ 694.918780] __x64_sys_ioctl+0x73/0xb0 [ 694.922677] do_syscall_64+0x103/0x610 [ 694.926597] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 694.931793] RIP: 0033:0x457f29 [ 694.934993] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:24:59 executing program 1: r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x42000, 0x0) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f00000000c0)={0x23, 0x5, 0x9, 0x18, 0x4, 0x100000000, 0x5, 0x6a, 0xffffffffffffffff}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x3}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000180)={r2, 0x6fb}, &(0x7f0000000200)=0x8) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:24:59 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 694.953897] RSP: 002b:00007fb83e84ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 694.961608] RAX: ffffffffffffffda RBX: 00007fb83e84ac90 RCX: 0000000000457f29 [ 694.968877] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 694.976150] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 694.983420] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e84b6d4 [ 694.990688] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:25:00 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x45, 0x0, 0x0) 04:25:00 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x8}, 0x2) 04:25:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5452, &(0x7f0000001000)) 04:25:00 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:00 executing program 4 (fault-call:5 fault-nth:5): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:00 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000040), 0x10000000000002c1) openat$vimc2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video2\x00', 0x2, 0x0) 04:25:00 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x10}, 0x2) 04:25:00 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x5460, &(0x7f0000001000)) [ 695.525276] FAULT_INJECTION: forcing a failure. [ 695.525276] name failslab, interval 1, probability 0, space 0, times 0 04:25:00 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x8001, 0x4000) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f00000000c0)={0x4, 0xffffffffffffffff, 0x1}) ioctl$IMCTRLREQ(r0, 0x80044945, &(0x7f0000000100)={0x800, 0x0, 0x4, 0x7f}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) [ 695.605092] CPU: 1 PID: 1234 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 695.611997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 695.622920] Call Trace: [ 695.625529] dump_stack+0x172/0x1f0 [ 695.629180] should_fail.cold+0xa/0x15 [ 695.633097] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 695.638233] ? ___might_sleep+0x163/0x280 [ 695.642402] __should_failslab+0x121/0x190 [ 695.646654] should_failslab+0x9/0x14 [ 695.650473] kmem_cache_alloc+0x2b2/0x6f0 [ 695.654644] mmu_topup_memory_caches+0x97/0x490 [ 695.659342] kvm_mmu_load+0x21/0x1300 [ 695.663161] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 695.668099] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.673695] ? debug_smp_processor_id+0x3c/0x280 [ 695.678485] vcpu_enter_guest+0x3c8d/0x60b0 [ 695.682823] ? mark_held_locks+0xf0/0xf0 [ 695.687980] ? perf_trace_lock+0x510/0x510 [ 695.692500] ? emulator_read_emulated+0x50/0x50 [ 695.697179] ? lock_acquire+0x16f/0x3f0 [ 695.701162] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 695.706196] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 695.711051] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 695.716094] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 695.720093] ? kvm_vcpu_block+0xcd0/0xcd0 [ 695.724257] ? __lock_acquire+0x548/0x3fb0 [ 695.728503] ? refcount_dec_and_test_checked+0x1b/0x20 [ 695.728520] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 695.728536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.728553] ? debug_smp_processor_id+0x3c/0x280 [ 695.728577] ? __fget+0x340/0x540 [ 695.739381] ? find_held_lock+0x35/0x130 [ 695.739397] ? __fget+0x340/0x540 [ 695.739413] ? lock_downgrade+0x880/0x880 [ 695.739436] ? kvm_vcpu_block+0xcd0/0xcd0 [ 695.768907] do_vfs_ioctl+0xd6e/0x1390 [ 695.772808] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.778366] ? selinux_file_ioctl+0x125/0x5e0 [ 695.782881] ? ioctl_preallocate+0x210/0x210 [ 695.787308] ? selinux_file_mprotect+0x620/0x620 [ 695.792098] ? ksys_dup3+0x3e0/0x3e0 [ 695.795833] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 695.801844] ? fput+0x128/0x1a0 [ 695.805146] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 695.810696] ? security_file_ioctl+0x93/0xc0 [ 695.815130] ksys_ioctl+0xab/0xd0 [ 695.818594] __x64_sys_ioctl+0x73/0xb0 [ 695.822499] do_syscall_64+0x103/0x610 [ 695.826410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 695.831602] RIP: 0033:0x457f29 [ 695.834806] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:25:00 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3e}, 0x2) 04:25:00 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002380)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f0000000100)=""/4096, 0x1000}, {&(0x7f0000001100)=""/18, 0x12}, {&(0x7f0000001140)=""/182, 0xb6}, {&(0x7f0000001200)=""/100, 0x64}, {&(0x7f0000001280)=""/74, 0x4a}, {&(0x7f0000001300)=""/4096, 0x1000}], 0x7) [ 695.853709] RSP: 002b:00007fb83e84ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 695.853725] RAX: ffffffffffffffda RBX: 00007fb83e84ac90 RCX: 0000000000457f29 [ 695.853734] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 695.853743] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 695.853753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e84b6d4 [ 695.853762] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:25:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x46, 0x0, 0x0) 04:25:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x48}, 0x2) 04:25:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40049409, &(0x7f0000001000)) 04:25:01 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) 04:25:01 executing program 2: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:01 executing program 4 (fault-call:5 fault-nth:6): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4c}, 0x2) 04:25:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:01 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x20) getsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 04:25:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40086602, &(0x7f0000001000)) [ 696.386807] FAULT_INJECTION: forcing a failure. [ 696.386807] name failslab, interval 1, probability 0, space 0, times 0 [ 696.499569] CPU: 1 PID: 1497 Comm: syz-executor.4 Not tainted 5.0.0+ #11 [ 696.506460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 696.515818] Call Trace: [ 696.518458] dump_stack+0x172/0x1f0 [ 696.522115] should_fail.cold+0xa/0x15 [ 696.526021] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 696.531153] ? ___might_sleep+0x163/0x280 [ 696.535318] __should_failslab+0x121/0x190 [ 696.539577] should_failslab+0x9/0x14 [ 696.543387] kmem_cache_alloc+0x2b2/0x6f0 [ 696.547555] mmu_topup_memory_caches+0x97/0x490 [ 696.552234] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 696.557786] kvm_mmu_load+0x21/0x1300 [ 696.561602] ? kvm_lapic_enable_pv_eoi+0x170/0x170 [ 696.566545] ? vcpu_enter_guest+0x2a33/0x60b0 [ 696.571050] ? lockdep_hardirqs_on+0x418/0x5d0 [ 696.575657] vcpu_enter_guest+0x3c8d/0x60b0 [ 696.580004] ? emulator_read_emulated+0x50/0x50 [ 696.584688] ? lock_acquire+0x16f/0x3f0 [ 696.588674] ? kvm_arch_vcpu_ioctl_run+0x240/0x1750 [ 696.593707] kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 696.598559] ? kvm_arch_vcpu_ioctl_run+0x425/0x1750 [ 696.603600] kvm_vcpu_ioctl+0x4dc/0xfa0 [ 696.607589] ? kvm_vcpu_block+0xcd0/0xcd0 [ 696.611742] ? __lock_acquire+0x548/0x3fb0 [ 696.615989] ? refcount_dec_and_test_checked+0x1b/0x20 [ 696.621273] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.626818] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.632376] ? debug_smp_processor_id+0x3c/0x280 [ 696.637153] ? __fget+0x340/0x540 [ 696.640619] ? find_held_lock+0x35/0x130 [ 696.644695] ? __fget+0x340/0x540 [ 696.648156] ? lock_downgrade+0x880/0x880 [ 696.652322] ? kvm_vcpu_block+0xcd0/0xcd0 [ 696.656497] do_vfs_ioctl+0xd6e/0x1390 [ 696.660397] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.665945] ? selinux_file_ioctl+0x125/0x5e0 [ 696.670626] ? ioctl_preallocate+0x210/0x210 [ 696.675041] ? selinux_file_mprotect+0x620/0x620 [ 696.679815] ? ksys_dup3+0x3e0/0x3e0 [ 696.684493] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 696.690039] ? fput+0x128/0x1a0 [ 696.693344] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 696.698896] ? security_file_ioctl+0x93/0xc0 [ 696.703320] ksys_ioctl+0xab/0xd0 [ 696.706795] __x64_sys_ioctl+0x73/0xb0 [ 696.710701] do_syscall_64+0x103/0x610 [ 696.714601] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 696.719794] RIP: 0033:0x457f29 [ 696.722990] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 696.741893] RSP: 002b:00007fb83e84ac78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 696.749605] RAX: ffffffffffffffda RBX: 00007fb83e84ac90 RCX: 0000000000457f29 [ 696.756879] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000005 [ 696.764179] RBP: 000000000073bfa0 R08: 0000000000000000 R09: 0000000000000000 [ 696.771469] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb83e84b6d4 [ 696.778742] R13: 00000000004c0e61 R14: 00000000004d2cb8 R15: 0000000000000006 04:25:01 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f00000000c0)={0x40, 0x1, 0x3}, 0x10) 04:25:01 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:02 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x47, 0x0, 0x0) 04:25:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40087602, &(0x7f0000001000)) 04:25:02 executing program 4 (fault-call:5 fault-nth:7): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:02 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x68}, 0x2) 04:25:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:02 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x181100, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3000004, 0x11, r1, 0x0) 04:25:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:02 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6c}, 0x2) 04:25:02 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x4020940d, &(0x7f0000001000)) 04:25:02 executing program 1: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000280)='/dev/autofs\x00', 0x7ffc, 0x0) ioctl$EVIOCGVERSION(r0, 0x80044501, &(0x7f00000000c0)=""/240) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) syz_open_dev$audion(&(0x7f0000000200)='/dev/audio#\x00', 0x4, 0x20000) 04:25:02 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:02 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:25:03 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x48, 0x0, 0x0) 04:25:03 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x74}, 0x2) 04:25:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405514, &(0x7f0000001000)) 04:25:03 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) write$P9_RLOCK(r1, &(0x7f00000000c0)={0x8, 0x35, 0x2}, 0x8) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:25:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x2, 0x0) 04:25:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:03 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) 04:25:03 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x7a}, 0x2) 04:25:03 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x103400, 0x0) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f0000000080)={0x3, &(0x7f0000000040)=[{}, {}, {0x0}]}) ioctl$DRM_IOCTL_SWITCH_CTX(r1, 0x40086424, &(0x7f00000000c0)={r2, 0x3}) readv(r0, &(0x7f0000000140), 0xd) 04:25:03 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x204}, 0x2) 04:25:03 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:04 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x49, 0x0, 0x0) 04:25:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000001000)) 04:25:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b47, 0x0) 04:25:04 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x300}, 0x2) 04:25:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x1000000000c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:04 executing program 1: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f00000000c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r2 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x7, 0xc2) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000140)={'veth0_to_bond\x00', 0x600}) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) 04:25:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x800455d1, &(0x7f0000001000)) 04:25:04 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80086601, &(0x7f0000001000)) 04:25:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:04 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4b49, 0x0) 04:25:04 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:05 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4a, 0x0, 0x0) 04:25:05 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80087601, &(0x7f0000001000)) 04:25:05 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:14 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x402}, 0x2) 04:25:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x541b, 0x0) 04:25:14 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$inet6_mtu(r1, 0x29, 0x17, &(0x7f00000000c0), 0x4) openat$cgroup(r1, &(0x7f0000000180)='syz0\x00', 0x200002, 0x0) ioctl$BINDER_THREAD_EXIT(r1, 0x40046208, 0x0) ioctl$CAPI_INSTALLED(r1, 0x80024322) syz_genetlink_get_family_id$net_dm(&(0x7f0000000100)='NET_DM\x00') getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000300)={0x0, 0xeb, "251258494fc3f12b2d594c5f3943fef0b10c530dee71ca6c68cd4229e417027485009eddcfecbc16e24087984fd82f5c5ba66b51661128a777822f014ce610fb53dc7a2c36f7e3c9c68af603c9dfef5b0343af0068fefa0eae334c562bee552bbf2988ad69b20d6fed70d660bcf359d39a7d1b21d8b43fc8a6dfbca10012dd29fe2b10921d85e5434fdb7bd493079efc48a0d9c53cb86623fae07ac045f028ffa44c33230be3dd5829478659ecf1f9e337ddcf01a2d4c6f2126acf046abceb42f769090564d614058a73f698df46539a92f2c71c4f1c9fbc0024043b25048ce3253c69a1313fe1c8229b88"}, &(0x7f0000000140)=0xf3) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000400)={r2, @in6={{0xa, 0x4e21, 0x9, @ipv4={[], [], @multicast2}, 0x81}}}, 0x84) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f0000000200)=""/220) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:25:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x81785501, &(0x7f0000001000)) 04:25:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:14 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4b, 0x0, 0x0) 04:25:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045516, &(0x7f0000001000)) 04:25:14 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:14 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:25:14 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x500}, 0x2) 04:25:14 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5421, 0x0) 04:25:14 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:25:14 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc00455d0, &(0x7f0000001000)) 04:25:14 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x4c0802, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40000, 0x0) r2 = gettid() prctl$PR_SET_PTRACER(0x59616d61, r2) ioctl$BINDER_SET_MAX_THREADS(r1, 0x40046205, 0x7ff) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0xa2, 0x8000, 0x6, 0x6, 0x0}, &(0x7f0000000140)=0x10) r4 = add_key$user(&(0x7f0000000200)='user\x00', &(0x7f0000000240)={'syz', 0x2}, &(0x7f0000000280)="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", 0x1000, 0xfffffffffffffff9) r5 = add_key$keyring(&(0x7f00000012c0)='keyring\x00', &(0x7f0000001300)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$instantiate(0xc, r4, &(0x7f0000001280)=ANY=[@ANYBLOB='new default user:/dev/mISDNtimer\x00 00000002199056809-84\x00'], 0x37, r5) setsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r3, 0x8000000000000000}, 0x8) bind$netrom(r1, &(0x7f0000001340)={{0x3, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) fcntl$setsig(r1, 0xa, 0x12) 04:25:15 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:25:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 04:25:15 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4c, 0x0, 0x0) 04:25:15 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5450, 0x0) 04:25:15 executing program 2: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:25:15 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0045878, &(0x7f0000001000)) 04:25:15 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = socket$inet(0x2, 0x80000, 0x8000) getsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000000), &(0x7f00000000c0)=0x4) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x8, 0xf4810, r0, 0x10) 04:25:25 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) syz_open_dev$sg(&(0x7f00000000c0)='/dev/sg#\x00', 0x9, 0x4000) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = socket$inet6_sctp(0xa, 0x0, 0x84) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x32) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x40, 0x0) ioctl$KVM_DEASSIGN_PCI_DEVICE(r2, 0x4040ae72, &(0x7f0000000280)={0x1, 0x8, 0x1, 0x7, 0x1}) getsockopt(r1, 0xfffffffffffffffd, 0xd39d, &(0x7f0000000100)=""/146, &(0x7f0000000200)=0x92) 04:25:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 04:25:25 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x600}, 0x2) 04:25:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551a, &(0x7f0000001000)) 04:25:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5451, 0x0) 04:25:25 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4d, 0x0, 0x0) 04:25:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551b, &(0x7f0000001000)) 04:25:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 04:25:25 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) getsockopt$inet_sctp6_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f00000000c0)={0x0, 0xffffffff}, &(0x7f0000000100)=0x8) syz_mount_image$f2fs(&(0x7f00000002c0)='f2fs\x00', &(0x7f0000000300)='./file0\x00', 0x20, 0x6, &(0x7f0000000640)=[{&(0x7f0000000340)="0ce1c53a6597c39683b01c5c52d61de6b003388cbe1805d3fe3c7b3c7813474ac026c9a289b0a12308c71a91dac68653afc9faa106ea3b657b1cabdfb126cb53a588478710b3ae3a8787e704950218628381f6e553c033b816778569dba8e7d99cf606a9dd4402617c373b4bc98b3ad501c1744980ce9848af9d63d4f2539ec0f6a5", 0x82, 0x8}, {&(0x7f0000000400)="4b6c0e19cdbbc3155c5ad8db9cb4a1e3c258ce2c468270aeac0c23b2566b00f3b5fd60436e3b76e86c9688c5671bbda0a7831c115b", 0x35, 0x2}, {&(0x7f0000000440)="e09ae05e7120c2be8bad392d3990e48634926607494299f5d275f0ac613c996b7d9a2aa8eec7372d0d2491e11df716aa8ef78b2d6f9b3080474847a708c26767ad6a2360e4af59337d7178948bb6504c5dfb8d5dcf10d39a6d74482fa2d629a96f19ca30e65016a5470cfe8fb1f3ac1f616b82c14e89c9e37726dd3e5d98690e3e2a18b1d4a282806882af51162447572f183b4d8b0fa2bc9287907b3acc89a9c2eb39347c6dcf06bba6af1c3d3bebf1a1ef35f0a309f71a4dedf6ac33f492a203086ab78b710cd835b1d6ad38974514abb8e48f096f8afce2711faf80d5f61ddeb5", 0xe2, 0x7}, {&(0x7f0000000540)="d9acfaba443d99de700f", 0xa, 0x8001}, {&(0x7f0000000580)="0e3aab335de29896", 0x8, 0x400}, {&(0x7f00000005c0)="bec249ece75312d0c0ac190747fdb7b6938c1d7fefa8617d1d5b26925fcf9787fbc77178a254b0e15d235a53d4cbe86cc0fdf28124dd22a68c8c9618b4aa5310145cc96e9b5da95bd5710483ac112c9e8a15bf234d38243a517cb9bd1ffddca24b1b13cbe6644cd960564e", 0x6b}], 0x40000, &(0x7f0000000700)={[{@background_gc_on='background_gc=on'}], [{@func={'func', 0x3d, 'KEXEC_INITRAMFS_CHECK'}}]}) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000200), &(0x7f0000000240)=0x4) getsockopt$inet_sctp_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0x1, 0xa02, 0xfffffffffffffffa, 0x9, 0x4}, &(0x7f0000000180)=0x14) ioctl$sock_bt_bnep_BNEPCONNDEL(r1, 0x400442c9, &(0x7f0000000280)={0x3, @local}) 04:25:25 executing program 2: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, 0x0) 04:25:25 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5452, 0x0) 04:25:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc008551c, &(0x7f0000001000)) 04:25:25 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:25 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0189436, &(0x7f0000001000)) 04:25:35 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x700}, 0x2) 04:25:35 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0xfffffffffffffffe, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) fcntl$setstatus(r0, 0x4, 0x40000) ioctl$SG_SET_COMMAND_Q(0xffffffffffffffff, 0x2271, &(0x7f0000000180)) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000100)=0x5, 0x4) 04:25:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x5460, 0x0) 04:25:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc020660b, &(0x7f0000001000)) 04:25:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:35 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4e, 0x0, 0x0) 04:25:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0405519, &(0x7f0000001000)) 04:25:35 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:35 executing program 1: r0 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_OVERLAY(r0, 0x4004560e, &(0x7f00000000c0)=0x6) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:25:35 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40049409, 0x0) 04:25:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc0505510, &(0x7f0000001000)) 04:25:36 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0xf1c}, 0x2) 04:25:45 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x0, 0x40000) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffff9c, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/121, 0x79, 0x0}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000003c0)={r0, 0x10, &(0x7f0000000300)={&(0x7f00000000c0)=""/245, 0xf5, r1}}, 0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) setsockopt$bt_BT_VOICE(r0, 0x112, 0xb, &(0x7f0000000380)=0x3, 0x2) r3 = add_key$keyring(&(0x7f0000000340)='keyring\x00', &(0x7f0000000400)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) r4 = request_key(&(0x7f0000000500)='blacklist\x00', &(0x7f0000000540)={'syz', 0x1}, &(0x7f0000000580)='/dev/mISDNtimer\x00', 0xfffffffffffffffa) keyctl$instantiate_iov(0x14, r3, &(0x7f00000004c0)=[{&(0x7f0000000440)="4e2eadcb5f193bb699adf68f5314118e64731e0762577c0df7278800f59ef94ba8cb9e052c7d237c9406d75d0939b715a73c487f1a47679de7d9a7246bfb3e82ceed23a8d969", 0x46}], 0x1, r4) readv(r2, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) 04:25:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105511, &(0x7f0000001000)) 04:25:45 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, 0x0, 0x0) 04:25:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae8b, 0x0) 04:25:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x4f, 0x0, 0x0) 04:25:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, 0x0, 0x0) 04:25:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105518, &(0x7f0000001000)) 04:25:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1c0f}, 0x2) 04:25:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1f00}, 0x2) 04:25:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) getdents(r0, 0x0, 0x0) 04:25:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4004ae99, 0x0) 04:25:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85512, &(0x7f0000001000)) 04:25:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) 04:25:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc4c85513, &(0x7f0000001000)) 04:25:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40086602, 0x0) 04:25:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x50, 0x0, 0x0) 04:25:46 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x20100, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000040)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x40087602, 0x0) 04:25:56 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2000}, 0x2) 04:25:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:56 executing program 3: r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/dsp\x00', 0x0, 0x0) getsockopt$inet6_mreq(0xffffffffffffff9c, 0x29, 0x1b, &(0x7f0000000600)={@ipv4={[], [], @loopback}, 0x0}, &(0x7f0000000640)=0x14) ioctl$sock_inet6_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000680)={@local, 0x30, r1}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000140)) r2 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, @perf_config_ext={0x1}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r3, 0x80e85411, &(0x7f0000000180)=""/25) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000080)={'bcsf0\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="440000000700000001800000000400009ebd9654618f4c53e1c662ff000081000000020000000200000501000000ff7f000000"]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r2, 0xc1105517, &(0x7f0000001000)) 04:25:56 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4020940d, 0x0) 04:25:56 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x51, 0x0, 0x0) 04:25:56 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = semget(0x0, 0x3, 0x80) ioctl$FIBMAP(r0, 0x1, &(0x7f00000000c0)=0x5) semctl$SETVAL(r1, 0x1, 0x10, &(0x7f0000000000)=0x5) 04:25:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x4, 0x80080) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000140), &(0x7f0000000180)=0x4) preadv(r0, &(0x7f0000000040)=[{&(0x7f0000000000)=""/47, 0x2f}], 0x1, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$vivid(&(0x7f0000000080)='/dev/video#\x00', 0x3, 0x2) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f00000001c0)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:25:56 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:25:56 executing program 1: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x3ff, 0x2, 0x3}) ioctl$VIDIOC_ENUMINPUT(r0, 0xc050561a, &(0x7f00000000c0)={0x0, "1ca606250a2ed4492af03b796f835c33260e09dabbebf57adc2f08ac4edee8cc", 0x1, 0x3f, 0x0, 0x2, 0x5020000, 0x4}) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000880)={0x0, 0x1f, 0x8, 0x6, 0x6, 0x5, 0x8, 0x6ef, {0x0, @in6={{0xa, 0x4e20, 0x100, @rand_addr="f86ab19cda53d824fa6353b4e0892646", 0x4}}, 0x660, 0x7, 0x6000000000, 0x3, 0x7}}, &(0x7f0000000940)=0xb0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f0000000980)={0x20, 0x8, 0x240000, 0x1, r1}, &(0x7f00000009c0)=0x10) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r2, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) getsockopt$inet_sctp6_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000200)={0x0, 0x80, 0x9, 0xffffffff, 0x5, 0x5, 0x8, 0x7, {0x0, @in={{0x2, 0x4e20, @empty}}, 0x3ff, 0xfff, 0x5, 0x3, 0x10000}}, &(0x7f00000002c0)=0xb0) syz_init_net_socket$llc(0x1a, 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f0000000380)={{0x0, 0x3, 0x5, 0x8, 'syz1\x00', 0x100}, 0x1, [0x100000000, 0x80000000, 0x0, 0x80000001, 0x5, 0x1f814830, 0x1, 0x4, 0x1, 0x8, 0x8, 0x2, 0x6, 0x7fff, 0xfffffffffffffffc, 0x2, 0x100000001, 0x10000, 0x20, 0x7, 0x100000001, 0xffffffffffffffff, 0x374, 0x6, 0x0, 0x4, 0xcd6, 0x1ff, 0xffffffffffffffc1, 0x8, 0x58f, 0x82c, 0x9, 0x1, 0x9, 0x3ff, 0x9, 0xfff, 0x2000, 0x100, 0x7ff, 0x4, 0x0, 0xdcc, 0x1f3, 0x100000001, 0x40000000, 0xf8, 0x5, 0x6, 0x27c06740, 0x80000000, 0x3, 0x7, 0x6, 0x80000001, 0xb817, 0x5, 0x0, 0x0, 0x1ff, 0x9, 0x3, 0x47, 0x5, 0xffffffff, 0x5, 0x7, 0x5, 0x101, 0x0, 0xd9, 0xffffffffffffff81, 0x200, 0x39a, 0xff, 0xffffffff, 0x1ff, 0xfffffffffffff177, 0x0, 0xb5, 0x0, 0x0, 0xfffffffffffffffe, 0x8, 0xfffffffffffff80e, 0x5, 0x1, 0xcef, 0x8001, 0x5, 0x4, 0x1bde, 0x4, 0x7fffffff, 0x20, 0xffffffffffff541b, 0x2, 0x0, 0x98, 0xdd44, 0xff, 0x80, 0x5, 0x2, 0x3, 0x6, 0x7fff, 0x0, 0x858, 0x1000000, 0x400, 0xffff, 0x100000001, 0x8, 0x9, 0x5, 0x0, 0x401, 0x6d, 0x1, 0x7fffffff, 0x18, 0x8, 0xefa, 0x3, 0x1ff, 0x1e]}) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000300)={r3, 0x8104}, &(0x7f0000000340)=0x8) 04:25:57 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4048ae9b, 0x0) 04:25:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) set_thread_area(&(0x7f0000000100)={0x1, 0x20000000, 0x1000, 0x2, 0x1, 0x0, 0x0, 0x400, 0x1, 0x1}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x200000f) r2 = dup3(r1, r1, 0x80000) ioctl$IOC_PR_PREEMPT(r2, 0x401870cb, &(0x7f0000000000)={0x0, 0x0, 0x7ff, 0x7}) ioctl$BINDER_THREAD_EXIT(r2, 0x40046208, 0x0) getsockopt$ARPT_SO_GET_REVISION_TARGET(r2, 0x0, 0x63, &(0x7f00000001c0)={'ah\x00'}, &(0x7f0000000240)=0x1e) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)=0x1) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000180)=0x2) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000340)={0xae, &(0x7f0000000280)=""/174}) getdents64(r2, &(0x7f0000000040)=""/128, 0x80) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000200)) 04:25:57 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:07 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3e00}, 0x2) 04:26:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) prctl$PR_GET_TSC(0x19, &(0x7f0000000240)) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) r3 = fcntl$getown(r1, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f0000000100)={{0x0, 0x0, 0x82, 0x80000001, '\x00', 0x2}, 0x0, 0x77010d44c2b44218, 0x2, r3, 0x4, 0x401, 'syz1\x00', &(0x7f0000000040)=['GPLppp0/]keyring.\x00', ')md5sumselinuxcgroupvmnet1:\x00', '/dev/snd/controlC#\x00', '\x00'], 0x42, [], [0x3, 0x20, 0x100000000, 0x5]}) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f00000003c0)=""/75) socket$tipc(0x1e, 0x2, 0x0) 04:26:07 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x400, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000000)=0x14) r1 = syz_open_dev$vcsa(&(0x7f00000003c0)='/dev/vcsa#\x00', 0x920, 0x400000) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_SET_NETID(r1, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfb, {{}, 0x0, 0x800b, 0x0, {0x8, 0x2, 0x1}}, ["", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040084}, 0x10) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) rt_sigqueueinfo(r3, 0x3a, &(0x7f0000000180)={0x10, 0x6, 0x80}) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r4 = openat$null(0xffffffffffffff9c, &(0x7f0000000200)='/dev/null\x00', 0x2000, 0x0) r5 = syz_genetlink_get_family_id$net_dm(&(0x7f00000002c0)='NET_DM\x00') sendmsg$NET_DM_CMD_START(r4, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r5, 0x600, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x8800) ioctl$UFFDIO_UNREGISTER(r4, 0x8010aa01, &(0x7f0000000240)={&(0x7f0000ffc000/0x3000)=nil, 0x3000}) 04:26:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4090ae82, 0x0) 04:26:07 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x52, 0x0, 0x0) 04:26:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000053c000/0x1000)=nil, 0x1000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r0, 0xc008551b, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffff1009000006000000050000000300000001000000"]) r2 = fcntl$getown(r1, 0x9) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r2, 0x10, &(0x7f0000000040)={0x7}) r3 = dup3(r1, r1, 0x80000) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000100)={0x100000001, {{0x2, 0x4e22, @remote}}, {{0x2, 0x4e24, @rand_addr=0x3}}}, 0x108) 04:26:07 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0xff, 0x80000) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000100)) readv(r0, &(0x7f0000000240)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$VIDIOC_G_JPEGCOMP(r1, 0x808c563d, &(0x7f0000000280)) ioctl$VIDIOC_S_OUTPUT(r1, 0xc004562f, &(0x7f0000000200)=0x1ca) 04:26:07 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:07 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x4138ae84, 0x0) [ 762.411206] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:26:07 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f0000000040)={0x0, 0x70, 0x2, 0x7, 0x4, 0x6, 0x0, 0x8, 0x2, 0x0, 0x9, 0x9, 0x1, 0x7, 0x7d9, 0xd2e5, 0x100000001, 0x7, 0x3f, 0xe67, 0x2, 0x6, 0xd5fd, 0x80, 0xffa, 0xdf2, 0x80, 0x6, 0x401, 0x3, 0x0, 0x400, 0x3f, 0x7, 0x40, 0x5, 0x3, 0x7, 0x0, 0x1, 0x5, @perf_bp={&(0x7f0000000000), 0x1}, 0x1, 0x1000, 0x8, 0x1, 0x7, 0x2800, 0x74}, r2, 0x8, r1, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/policy\x00', 0x0, 0x0) write$USERIO_CMD_SEND_INTERRUPT(r3, &(0x7f0000000180)={0x2, 0x9}, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 762.571679] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:26:17 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x0, 0x0) ioctl$SIOCAX25DELFWD(r0, 0x89eb, &(0x7f00000000c0)={@null, @null}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:26:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:17 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3f00}, 0x2) 04:26:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x41a0ae8d, 0x0) 04:26:17 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x53, 0x0, 0x0) 04:26:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xfffffffffffffffd, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000578000/0x2000)=nil, 0x2000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x101000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:17 executing program 1: r0 = dup(0xffffffffffffffff) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x3b, 0xffffffffffffa284, @buffer={0x0, 0xf, &(0x7f0000000000)=""/15}, &(0x7f00000000c0)="e2957448b559cff12c76e53fe2f4f5b81fa2d411b36568fb0d6fa089dbb12305a677ddb5cd9352459d4fffea8905ee9e0b4670b3e334ed2b00e86b", &(0x7f0000000200)=""/193, 0xffffffff, 0x1, 0x2, &(0x7f0000000100)}) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:26:17 executing program 3: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:26:17 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:17 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8004ae98, 0x0) 04:26:17 executing program 1: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_QUERY_DV_TIMINGS(r0, 0x80845663, &(0x7f0000000300)) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000000c0), 0x10) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$SG_GET_VERSION_NUM(r0, 0x2282, &(0x7f0000000100)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x200000000009}}, 0x20) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f0000000200)={0x3, 0x40, 0xfa00, {{0xa, 0x4e24, 0x6, @remote}, {0xa, 0x4e22, 0x9, @mcast1, 0x5}, r2, 0x8000}}, 0x48) ioctl$sock_ax25_SIOCADDRT(r0, 0x890b, &(0x7f0000000280)={@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x0, [@null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) 04:26:17 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000800000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = syz_open_dev$amidi(&(0x7f0000000140)='/dev/amidi#\x00', 0x1, 0x0) r2 = geteuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0, 0x0}, &(0x7f00000001c0)=0xc) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000200)={{{@in=@loopback, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000000300)=0xe8) mount$fuseblk(&(0x7f0000000040)='/dev/loop0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='fuseblk\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x6000}, 0x2c, {'user_id', 0x3d, r2}, 0x2c, {'group_id', 0x3d, r3}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x13}}, {@max_read={'max_read', 0x3d, 0x1}}, {@blksize={'blksize', 0x3d, 0x1000}}, {@default_permissions='default_permissions'}, {@default_permissions='default_permissions'}, {@allow_other='allow_other'}], [{@uid_gt={'uid>', r4}}, {@smackfsfloor={'smackfsfloor', 0x3d, '('}}]}}) [ 772.874142] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:26:27 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4000}, 0x2) 04:26:27 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x2, 0x0) ioctl$IOC_PR_RELEASE(r1, 0x401070ca, &(0x7f0000000040)={0x8, 0x400}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80086601, 0x0) 04:26:27 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x4, 0x80) ioctl$sock_inet_SIOCSIFNETMASK(r1, 0x891c, &(0x7f00000000c0)={'ip6_vti0\x00', {0x2, 0x4e21, @rand_addr=0x2}}) 04:26:27 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x54, 0x0, 0x0) 04:26:27 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:26:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x2, 0x200000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040), 0x106, 0xb}}, 0x20) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:27 executing program 1: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x400800, 0x0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0xcb00, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000000100)={0x0, r1}) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000640)) creat(&(0x7f0000000140)='./file0\x00', 0x4a) fcntl$getownex(r2, 0x10, &(0x7f0000001740)) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000001980)=0x0) timer_create(0x4, &(0x7f0000001900)={0x0, 0x20, 0x400000000002, @tid=r3}, &(0x7f0000001940)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000680)={{0x1, 0x7, 0x200, 0x4, 'syz1\x00', 0x3}, 0x0, [0x8000, 0x4, 0x5, 0x7ff, 0xfffffffffffffff7, 0x2, 0x7, 0x7fffffff, 0xfffffffffffffffa, 0x1ff, 0x20, 0x2, 0x6, 0x80000000000000, 0xbf24, 0xda8, 0x4, 0x1, 0x4, 0x8, 0x8, 0x0, 0x20, 0x101, 0x0, 0x8, 0xa14, 0x0, 0x400, 0x81, 0x9, 0x96, 0xfc, 0x40, 0x7, 0xfffffffffffffffb, 0x0, 0x2, 0xff, 0x6, 0x5, 0x9, 0x8, 0x9, 0xb0db, 0x6, 0xff, 0x9, 0x101, 0x59f, 0x7fff, 0xffffffffffff8000, 0x1, 0x8, 0x7fff, 0x2fa, 0x2, 0x7, 0xffffffffffffff54, 0x0, 0x0, 0x1, 0x53d, 0xffff, 0x777, 0x7, 0x2, 0x50, 0xd98, 0x8, 0x2, 0x569f, 0x61f, 0x5, 0x6, 0x151, 0x8, 0x8, 0x1, 0x1, 0x4, 0x100000001, 0x4, 0x0, 0x1, 0x401, 0x4e, 0x7, 0x6e, 0x8000, 0xb39d, 0xaf65, 0x5f, 0xe6, 0x8, 0x1f, 0x0, 0x0, 0x0, 0x0, 0xffffffffec901738, 0x3ff, 0x7fff, 0x9, 0x800, 0x1, 0x9, 0x800, 0x3, 0x80000000, 0x2, 0x18000000000, 0xe77, 0x4, 0x3, 0x81, 0x400, 0x10001, 0x100000001, 0x200, 0x6, 0x20, 0x63f7, 0x4, 0xbd3, 0x8, 0xffffffff]}) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000440)={0x0, {{0xa, 0x4e21, 0xad8, @remote, 0x2}}, {{0xa, 0x4e23, 0xfffffffffffffffe, @empty, 0x1000}}}, 0x108) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000580)={0x0}, &(0x7f00000005c0)=0xc) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000180), 0x4) sched_setattr(r5, &(0x7f0000000600)={0x30, 0x2, 0x1, 0x9, 0x5, 0x1, 0x10000, 0xffff}, 0x0) timer_delete(r4) readv(r2, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000380)={'nat\x00'}, &(0x7f0000000400)=0x25) 04:26:27 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:26:27 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x80087601, 0x0) 04:26:27 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) ioctl$SG_GET_TIMEOUT(r1, 0x2202, 0x0) 04:26:37 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4800}, 0x2) 04:26:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x8000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000040)={0x7f, @multicast1, 0x4e24, 0x3, 'rr\x00', 0x157aeaf849bc914a, 0x1, 0xc}, 0x2c) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:37 executing program 2: getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r1 = dup2(r0, r0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:26:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8090ae81, 0x0) 04:26:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x200000, 0x0) io_setup(0x9, &(0x7f0000000240)) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f00000000c0)=0x1, &(0x7f0000000100)=0x4) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000180)=0x8, &(0x7f0000000200)=0x4) sendto$inet(r1, &(0x7f0000000280)="0710e871197945f3096d7a6adbfa183aa3781f056b005b35630cf4af37", 0x1d, 0x20000001, 0x0, 0x0) 04:26:37 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x55, 0x0, 0x0) 04:26:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000000, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x4000, 0x20000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setxattr$security_ima(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.ima\x00', &(0x7f0000000080)=@ng={0x4, 0x0, "5d0b632262bb820d0ae2afa0ade5e3cc0c13db"}, 0x15, 0x1) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ubi_ctrl\x00', 0x4000, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000340)=""/108) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000280)=ANY=[@ANYBLOB="040000000000000000400000000000008700000000000000", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000feff0000000000007cfeffffffffffff", @ANYPTR=&(0x7f0000001080)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000000000000000000fdffffff000400000000000000", @ANYPTR=&(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00'], @ANYBLOB="000000000000000001000000000000002900000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) 04:26:37 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:37 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x8138ae83, 0x0) 04:26:37 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x400, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:26:47 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4c00}, 0x2) 04:26:47 executing program 3: r0 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/attr/current\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000100)="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") r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 04:26:47 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:47 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000040)=""/107, 0xffffffffffffff9d}], 0x0) 04:26:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0x81a0ae8c, 0x0) 04:26:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x56, 0x0, 0x0) 04:26:48 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000240)='/dev/snapshot\x00', 0x40000, 0x0) unlinkat(r1, &(0x7f0000000200)='./file0\x00', 0x200) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x40002, 0x0) getsockopt$IP6T_SO_GET_INFO(r2, 0x29, 0x40, &(0x7f00000000c0)={'filter\x00'}, &(0x7f0000000140)=0x54) 04:26:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:48 executing program 3: r0 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x491b, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1cac0000000000, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x0, 0x0, 0x1e1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, r0, 0x0, 0x5, &(0x7f0000000000)=']-lo\x00'}, 0x30) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r1, 0x3, &(0x7f0000001080)=""/4096) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='pids.current\x00', 0x0, 0x0) ioctl$EVIOCSABS0(r2, 0x401845c0, &(0x7f0000000200)={0x1f, 0x6b, 0x2, 0x8, 0x3, 0x7}) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$EVIOCGPROP(r3, 0x80404509, &(0x7f00000000c0)=""/215) 04:26:48 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:48 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r0 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept4$ax25(r1, &(0x7f0000000040)={{0x3, @default}, [@default, @bcast, @remote, @default, @rose, @rose, @bcast, @null]}, &(0x7f0000000100)=0x48, 0x80000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000000180)) ioctl$RNDADDTOENTCNT(r1, 0x40045201, &(0x7f0000000140)=0x4d1) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f00000001c0)={0x6, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 04:26:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 04:26:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6087}, 0x2) 04:26:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0)=0x8, 0x4) 04:26:58 executing program 3: r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) fsetxattr(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="73797374656d2e6264657663707573657463707573657476626f786e6574312d2b637075736574706f7369785f61636c5f616363657373637075736519083df338f39c0aedcdca9e43eeb0746574683047504c757367725e7d00"], &(0x7f0000000080)='^vmnet1user:trusted.\x00', 0x15, 0x3) fdatasync(r0) splice(r0, &(0x7f0000000580), r0, &(0x7f00000005c0), 0x8, 0x8) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000540)=@req3={0xffffffffffffffff, 0x7, 0x5, 0x20, 0x6, 0x5, 0x6}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) setsockopt$packet_buf(r0, 0x107, 0x16, &(0x7f0000000240)="681a6f794a7ee3e5f24fad19a69aeb0cc1fa7200c44cf3f6cffc993b4ad059491e84bd04477844005137d52d4fdea7484f00365911baebf0efe6073f4eab8be2791b1be2580636c64c699d48cad6e3c8bf536bcc4f019a89568ac1bcd52fe27577ae0cd98e9ac7bd4f917cf655e81f8883c838aee6439f", 0x77) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85513, &(0x7f0000000e40)={{}, 0x0, [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x1], {0x0, 0x1c9c380}}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000004c0)=0x0) perf_event_open(0x0, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x1, 0x0) write$sndseq(r1, &(0x7f0000000500)=[{0x0, 0x0, 0x3, 0x40000000000000, @time, {0xffffffffffffffff}, {0x4}, @connect={{0x8b, 0xfffffffffffffa72}, {0x5, 0x401}}}], 0x30) fcntl$F_GET_RW_HINT(r3, 0x40b, &(0x7f00000007c0)) getpeername(r0, &(0x7f00000002c0)=@can={0x1d, 0x0}, &(0x7f0000000340)=0x237) lsetxattr$trusted_overlay_nlink(&(0x7f0000000600)='./file0\x00', &(0x7f0000000640)='trusted.overlay.nlink\x00', &(0x7f0000000680)={'U-', 0x4}, 0x28, 0x3) sendmsg$can_bcm(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x1d, r4}, 0x10, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="02008e0001020000ff7f000000000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="020000a00100000004000020240200005b8309f6697cf73b67fb2c2ab04e7bdfd2f6c64d2aaf6b9476dc462d6ffc553d7e70729437626fda3b40b43a894811c3945dc568618e2e7b73d8ccebf0084ad7"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x801) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000000)=0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ptrace$getregs(0xe, r5, 0x1000, &(0x7f0000000180)=""/169) 04:26:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0045878, 0x0) 04:26:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x57, 0x0, 0x0) 04:26:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6800}, 0x2) 04:26:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x624141) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 04:26:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc0189436, 0x0) 04:26:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:58 executing program 3: mprotect(&(0x7f00002dd000/0x4000)=nil, 0x4000, 0x2000000) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:26:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={'syz', 0x3}, &(0x7f0000000100)="f345cd1c492095d87700140e469f06fbb48914f08343331decbfb2a938efe64962bf24c09b880bafee8beb1bf9c0a0f05a4cd7371692ad1ea4ea880d4ad7449d814e0f08207e77310701f38d30e9f3508cdffa51c627ab69df760d2c2f871b55580b0386d66229e890ca48e26c462e37255caf8db138222960824b96f90b187d30cfc089bce66582285e496bf63bc4ee491da59b2f5e60e29a1f5559", 0x9c, 0xffffffffffffffff) keyctl$assume_authority(0x10, r1) 04:26:58 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:26:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$FIGETBSZ(r0, 0x2, &(0x7f0000000000)) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = fcntl$dupfd(r1, 0x406, r0) ioctl$EVIOCGKEYCODE_V2(r2, 0x80284504, &(0x7f0000000040)=""/24) mmap(&(0x7f0000113000/0x1000)=nil, 0x1000, 0x6, 0x10, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000100)={{0x9, 0x3, 0x6c3, 0x4, '\x00', 0x40b}, 0x0, [0x101, 0x9, 0x532, 0x100000000, 0x401, 0x7, 0x9, 0xaf0, 0x1, 0x5, 0x8, 0xd3d9, 0x7f, 0xfffffffffffffffe, 0x401, 0x2, 0x7, 0x100000001, 0xfa, 0x6, 0x7, 0x239, 0xffffffffffffffba, 0x8001, 0x8001, 0x8fb2, 0x7, 0x326, 0x6, 0x400, 0x3, 0x9, 0xfffffffffffffff8, 0x5, 0x80000001, 0x1f, 0x4, 0x101, 0x3, 0x1000, 0x400, 0x8, 0x77f6d63c, 0x8, 0x1, 0x3, 0x1, 0xefb, 0xfffffffffffffffb, 0x94e6, 0x9, 0x7, 0x3f, 0x8, 0x0, 0x100000001, 0x200, 0x5, 0x8001, 0x400, 0x80000000, 0x1, 0x4, 0x7f, 0xffffffffffff619f, 0x4, 0x5, 0x8, 0x3f, 0x0, 0x6, 0x4, 0x200, 0x2, 0x4, 0x8, 0x7f, 0x7763, 0x3, 0x7fffffff, 0x9, 0x5, 0x6, 0x800000, 0x1f, 0x1, 0x101, 0x4, 0x7f, 0x7, 0xffff, 0x3ff, 0x7877, 0x2, 0x6, 0x8001, 0x7, 0x7, 0x2, 0xffffffffffff8001, 0x1, 0x6, 0x0, 0x7, 0x8, 0x200, 0x3, 0x1, 0x7, 0x4, 0x1, 0x2b2, 0x0, 0x8, 0xd9ab, 0x14000000000, 0xfffffffffffffffc, 0x0, 0xffffffffffffffe1, 0xb655, 0x6f, 0x1, 0x1, 0x8, 0x1, 0xffffffffffffff1d, 0x1f, 0x1], {0x0, 0x1c9c380}}) 04:26:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc018ae85, 0x0) 04:26:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x58, 0x0, 0x0) 04:26:59 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10800, 0x0) getsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) fstatfs(r0, &(0x7f0000000100)=""/238) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:09 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6c00}, 0x2) 04:27:09 executing program 1: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) readv(r0, &(0x7f0000000540)=[{&(0x7f0000000200)=""/161, 0xa1}], 0x1) r1 = gettid() r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) timer_create(0x0, &(0x7f0000000080)={0x0, 0x2000000000000012, 0x0, @thr={0x0, 0x0}}, &(0x7f0000044000)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/load\x00', 0x2, 0x0) dup2(r2, r0) tkill(r1, 0x1000000000016) r3 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r3, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r4 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x40, 0x0) write$P9_RCLUNK(r4, &(0x7f0000000100)={0x7, 0x79, 0x1}, 0x7) fcntl$F_GET_FILE_RW_HINT(r4, 0x40d, &(0x7f0000000140)) 04:27:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xc020660b, 0x0) 04:27:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:09 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x59, 0x0, 0x0) 04:27:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, 0x0) r1 = dup2(0xffffffffffffffff, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:09 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x800, 0x0) ioctl$VIDIOC_G_AUDIO(r1, 0x80345621, &(0x7f0000000080)) 04:27:09 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2) 04:27:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:09 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mISDNtimer\x00', 0x8000, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0xffffffffffffff80, 0x4000) ioctl$SG_SCSI_RESET(r1, 0x2284, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x2200, 0x0) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f0000000200)=ANY=[@ANYBLOB="020000000000000000000000000006000500000000000000ff0f0000000000000900000000000000f68a83198770937ea185cc06a66944540a49d000ac2de70e14af16d610705cb3d0c9fc015498dffbca2778f786f4f2663d24d6f4676c7e4861f739a369e07de1b344df77ef86baa262714034bb6e7253367a423694d199d3bab0e9453269b4f8a0c86902d9029f8a55b4636b3b025d69700ada6d5860c8e338b3113348e3e20dc930351c5634abbc09ff8e9848be6e43048494c8c26a29facad586a5a1fc13"]) 04:27:09 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:19 executing program 1: openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup/syz1\x00', 0x200002, 0x0) r0 = syz_open_dev$swradio(&(0x7f0000000100)='/dev/swradio#\x00', 0x0, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000001c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) ioctl$TCGETA(r0, 0x5405, &(0x7f0000000140)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mISDNtimer\x00', 0xffffffffffffffff, 0x0) syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x3, 0x0) readv(r1, &(0x7f0000000000)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) ioctl$SG_SET_FORCE_PACK_ID(r0, 0x227b, &(0x7f0000000180)=0x1) 04:27:19 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x7400}, 0x2) 04:27:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x4001, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080)='TIPCv2\x00') sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000003c0)={&(0x7f0000000040), 0xc, &(0x7f0000000380)={&(0x7f0000000100)={0x264, r2, 0x100, 0x70bd2d, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0xbc, 0x1, [@TIPC_NLA_BEARER_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfe0000000000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x4, @empty, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e23, @remote}}}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf0}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @remote, 0x5}}, {0x14, 0x2, @in={0x2, 0x4e24, @rand_addr=0x1}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x944}]}, @TIPC_NLA_BEARER={0x24, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_NODE={0x14, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xffff}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, [@TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_LINK={0x78, 0x4, [@TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x20000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x40, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1f}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x303}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xb}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xc9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA={0x8c, 0x5, [@TIPC_NLA_MEDIA_PROP={0x34, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfc}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1ff}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}]}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}]}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x801}, 0x8000) 04:27:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(0xffffffffffffffff, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3) 04:27:19 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5a, 0x0, 0x0) 04:27:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:19 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f00000002c0), 0x0) 04:27:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0xe319, 0x505000) ioctl$RTC_ALM_SET(r1, 0x40247007, &(0x7f0000000140)={0xa, 0xa, 0x15, 0x1, 0x6, 0x5, 0x3, 0x165, 0x1}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x111, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000100)={0xf, 0x8, 0xfa00, {r2, 0x1f}}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4) 04:27:19 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) r2 = openat$null(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/null\x00', 0x440000, 0x0) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe7000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000100)="66b9850300000f32ba200066b80000000066efbaf80c66b844d0f18766efbafc0c66b88600000066efbaa000ecaf660f3a084c0e000f30ba4200ec670f118edebc30442e0f08", 0x46}], 0x1, 0x2, &(0x7f0000000200), 0x0) 04:27:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, 0xffffffffffffffff) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) pipe(&(0x7f0000000240)={0xffffffffffffffff}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer2\x00', 0x4400, 0x0) ioctl$UDMABUF_CREATE(r1, 0x40187542, &(0x7f00000002c0)={r2, 0x1, 0xfffffffffffff000}) r3 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffff9c, 0x84, 0xe, &(0x7f0000000000)={0x0, 0x400, 0x6, 0xff, 0x2, 0x19c8, 0xffff, 0x6, {0x0, @in6={{0xa, 0x4e23, 0x8181, @dev={0xfe, 0x80, [], 0x13}, 0x1f}}, 0x1f, 0x5, 0x61, 0x1f, 0x401}}, &(0x7f0000000100)=0xb0) setsockopt$inet_sctp_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000140)={r4, 0x2, 0xd6, "f9f5885910ccae50edd563f2a05e2a654d9b6bc2b0a4fdad0028baeff0df625c1e2ad2134bd3aa553b7dec7b68ce7d79e01a36de2f3089dc5c09f7efef3d2eaa9c42d965116b50be2351447314705557b2dae389a3d56fd67986934e29592e9998b758bea10f7cef7fe14f6d1b245592ffb6e6f4be3e52c399fb1e985b0bf76f98fa9ea7fea8275de9f57d2f9e7ebf7c073687d3ab91c135493e8ad1488187f0d105d60040d83ead076ef3724f315f8612bb5342b1ad09eba869f7dab909fd3fd1035e27af1848e9f517313dfffeeacd4aba11091fe3"}, 0xde) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:29 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x7a00}, 0x2) 04:27:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5) 04:27:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:29 executing program 1: r0 = socket(0xe, 0x5, 0x80000001) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x12, 0x9, 0xe, 0x5, 0x0, 0x70bd25, 0x25dfdbfe, [@sadb_sa={0x2, 0x1, 0x4d3, 0x7fff, 0x1, 0x24, 0x1, 0x1}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}]}, 0x28}}, 0x40) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/mISDNtimer\x00', 0x40000000000, 0x0) readv(r1, &(0x7f0000000240), 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xdc9, 0x40801) ioctl$KDGETKEYCODE(r2, 0x4b4c, &(0x7f0000000480)={0x5, 0x7}) r3 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100fff, 0x0) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e22, 0x8001, @remote, 0x7}}, 0x0, 0x9, 0xfffffffffffffff7, 0x100000000, 0x3f1d}, &(0x7f0000000240)=0x98) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000380)={r4, @in6={{0xa, 0x4e24, 0x4, @loopback, 0xfffffffffffffff7}}, 0x0, 0xd84, 0x9, 0x8, 0x1a}, &(0x7f0000000440)=0x98) ioctl$KDGETKEYCODE(r3, 0x4b4c, &(0x7f0000000080)={0x0, 0x1ff}) 04:27:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = open(&(0x7f00000002c0)='./file0\x00', 0x0, 0x140) recvfrom$llc(r1, &(0x7f0000000300)=""/211, 0xd3, 0x2000, &(0x7f0000000400)={0x1a, 0x200, 0x1, 0x5, 0x8, 0xfffffffffffffc01, @dev={[], 0x14}}, 0x10) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) pipe(&(0x7f0000000000)={0xffffffffffffffff}) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000280)=0xe7bb, 0x4) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') socket$isdn(0x22, 0x3, 0x22) sendmsg$IPVS_CMD_GET_SERVICE(r2, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000200)={&(0x7f0000000100)={0xcc, r3, 0x200, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x6c, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0xfffffffffffffffe}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'rose0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_bridge\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x10000}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x1}]}, @IPVS_CMD_ATTR_SERVICE={0x4c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x88}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x10}}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast1}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x40011) 04:27:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5b, 0x0, 0x0) 04:27:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x4000, 0x0) mincore(&(0x7f0000ffd000/0x2000)=nil, 0x2000, &(0x7f0000000100)=""/241) ioctl$VIDIOC_RESERVED(r2, 0x5601, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) mmap$perf(&(0x7f00006eb000/0x2000)=nil, 0x2000, 0x0, 0x10010, r1, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x81) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x11000) 04:27:29 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x8000, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0xc) ioctl$EVIOCGLED(r1, 0x80404519, &(0x7f0000000200)=""/245) write$cgroup_pid(r1, &(0x7f0000000140)=r2, 0x12) 04:27:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7) 04:27:29 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) [ 844.985347] QAT: Invalid ioctl 04:27:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000b}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) openat$vfio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vfio/vfio\x00', 0x400480, 0x0) 04:27:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214a}, 0x2) 04:27:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:39 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x500) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="28c26ac0530331035d37b524e6010000", @ANYRES16=r2, @ANYBLOB="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"], 0x128}, 0x1, 0x0, 0x0, 0x40084}, 0xc339ac2f81c6f56e) 04:27:39 executing program 3: r0 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000300)='/proc/self/net/pfkey\x00', 0x0, 0x0) openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x10000, 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000340), &(0x7f00000003c0)=0xa) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/mls\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x4, @loopback, 0x200}}}, &(0x7f0000000240)=0x3f2) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000280)={r2, 0x2}, &(0x7f00000002c0)=0x8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x81, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000380)='/dev/dsp#\x00', 0x2, 0x40000) ioctl$sock_SIOCDELDLCI(r3, 0x8981, &(0x7f0000000040)={'syzkaller0\x00', 0x80000001}) prctl$PR_GET_FPEXC(0xb, &(0x7f0000000100)) 04:27:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc) 04:27:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5c, 0x0, 0x0) 04:27:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000080)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x10000, 0x0) ioctl$NBD_SET_SIZE(r1, 0xab02, 0x8) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214b}, 0x2) 04:27:40 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0xbe, 0x541800) ioctl$DRM_IOCTL_AGP_RELEASE(r1, 0x6431) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x0) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214c}, 0x2) 04:27:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = add_key(&(0x7f0000000100)='ceph\x00', &(0x7f0000000140)={'syz', 0x3}, &(0x7f0000000180)="0f7555367d76b382af49717321f43f5ea765ea1dd5782502a6a489", 0x1b, 0xfffffffffffffffb) add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x3}, &(0x7f0000000080)="3293886f8d51499ceb03b2ecd75385f663828e49226486347d959285e3f0ed1b", 0x20, r1) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r2 = syz_open_dev$admmidi(&(0x7f00000001c0)='/dev/admmidi#\x00', 0x8000, 0x80) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240)='TIPCv2\x00') sendmsg$TIPC_NL_NAME_TABLE_GET(r2, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000380)={&(0x7f0000000280)={0xd0, r3, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x2c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_MON={0x1c, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4bc3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x6}]}, @TIPC_NLA_NODE={0xc, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xff}]}, @TIPC_NLA_NODE={0x34, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x7ff}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x61}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x3}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xa8}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:40 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214d}, 0x2) 04:27:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:40 executing program 1: r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000180)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f0000000200)={0xb4, r1, 0x1, 0x70bd27, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0xa0, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'gretap0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @multicast2}}, {0x20, 0x2, @in6={0xa, 0x3e7, 0xa216, @rand_addr="5878321a746d0771bc78e1933d9e27b8", 0x7fff}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x5, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @multicast1}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}]}]}, 0xb4}, 0x1, 0x0, 0x0, 0x4000}, 0x1) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0xfffffffffffffffc, 0x0) readv(r2, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5d, 0x0, 0x0) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214e}, 0x2) 04:27:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11) 04:27:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000322000/0x1000)=nil, 0x1000, 0x2000002) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x1, 0x9, &(0x7f0000000680)=[{&(0x7f0000001080)="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", 0x1000, 0x5}, {&(0x7f0000000100)="cbb859d82e5fe5edd059b1ee11b0a49f11877a4a44bae69a637a480a367a603d055c7c15f7d6c70fce52aee556f5984d1e1942df206174867b9933454bb31d7f64cc41334a78bfd001414eea7d3b9a0fb9f05b5849e2d6c9f32f8d6fd57a00e30f15f567fb6ee5bb11896debdb173673f2ae09d7624a0d72061a3aeca1cf3fdcf2455d41da248a15ad0f2f1230bbd53184ca5433b1dd9189f214a99096f0be60dc8b8fb049f4f13a7e39559d2c392e2ab6e05d1c98a8a686090a19c2dd3261f57c68f1d5d2c808b1dee6aa0d32bf0ab8329396523982c82e4e3d9710195bbfa8", 0xe0, 0x3}, {&(0x7f0000000200)="98ac57d5c5b394362464a06a2a1f09be0bbcda9c782be001576e801ffe2d8102b33a8e2db7e14d52e61440e04cd13d6aef1f5684e98f4ccb8bec47a33eec5e3d21d79803a8927054499852f73128668dd5d908d6d44ff5358c4cd790a7695fc43c371e92b3a1699cf939738000c32c1efcd513663f99397fabcec4c7784630391afed05c447941284d51ab46c742", 0x8e, 0x9}, {&(0x7f00000002c0)="c39a6f415115147f52f999fe9827c339b1bceb0187fefcc5a5ec47f47fd0c87ed7777682e8adc3b5078e36c229488cd6ffb133768e929e0836c7a63025f51eec4050afff0e66172a34d3c43612f0d0d1d137ff1026afc501c06d9b179a219206e3d3301d99601429673f6863ca018b4f02f09ec6e5b120d03ab0b15c225f4c3e9db76fb2d783990895b9c9e5dec055915d53a4bd4d817b1e6af37f6f5fd41ccc04c3fe6795bff4749891c14ab3f21110d1d6128495d7", 0xb6, 0x358f}, {&(0x7f0000000380)="44ab54ff546d6f138dd72c1240fe5a4083d51a6070ae3745fafe6a51becb7473164a67b1934caf60a819ee56860177f03dd89132480f0b332dca9d9447da93bfda7f2eaacec03e9d0afba4b3d7671eac5be88d5b93f534e1c7801498cb6c0fedcf3c4fcdc932473e65bc4935cdba46b971872f7343050d97de572af2b6b76251ff94438c84fa99771c83b7b992e0f90376c3a2ae173d7a754245ca514cdd72a11013f15684f09f254b834926c933c2c1b905b4e8ee93c506f8c95a7873922240c1517a5174616ac42bea2f9578fc79", 0xcf, 0x31e9}, {&(0x7f0000000080)="d2eff78333c3be4920263f574ee772a45d550ae14e8c0e7b31fa2c122ef660bf0f884a032b6c917e0f41157ad7dfec953fb0681f532106690ff56a7e8c78d1", 0x3f, 0x96a6}, {&(0x7f0000000480)="806fdbb848ae38f97f75acc2c6fd5ea891df1eecca973845da6f91c3bcc9c4d8d686fb69704ea23697f06d0314231780a100e8a42be0d4ac89abb614e1e73465eb3b5e94a503b7332a7e0e7989c876c34ecaf5745c61915c9b0c547f391c55f43abc4c3dd1f856fb4ffb31a37a4de6eed34b3c854d7cab398149a39472b815b7c29790740e41def115868e2f8c119bf0534a968c6d3f0219ef47", 0x9a, 0x5}, {&(0x7f0000000540)="a39b543dbbf2a3044a92d47337df0df07d98326b5c1025b4643cc927cbf08dab5fd505757152c2c0c9546ac2cf6fd0ec4117bc838a3e7ee810c521bc2c14910e55796e5fc48911149a061b0a5863c062e5b4879049b89efca7bc0b91b940938e73134641b777545c40157edf0028c5169fd9ce37b80e0d154c7970c12d921e9d0578afae154a2b56eb4167d6405e9c2535e4f9fbc9e2fcd625bfb2af68236bed1013767c57f314abe3ec3a", 0xab, 0x9}, {&(0x7f0000000600)="5992105575fe9ff224c3f1790910fd2a9d8d4bb7185d12fd9257ca4f9e0346ef79086f8d9dd6e2ba0c22a8f8b5af11e84781f12f83a1a0f5fe7c0014a8acf77857f423d9a95e25745d6bdcdf64229b88fb48b675cfd436017cc167af3067b93a79ab67aea95b669b9168b6c464078af4b4b52215a205ae68b38dc97908cb25d4", 0x80, 0x3}], 0x800000, &(0x7f0000000780)='proc:ppp1eth1\x00') pipe(&(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000800)=0x2000) 04:27:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(0xffffffffffffffff, 0x0, &(0x7f00000006c0), 0x0) getdents(r0, 0x0, 0x0) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1214f}, 0x2) 04:27:40 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) ioctl$FIDEDUPERANGE(r0, 0xc0189436, &(0x7f0000000140)={0x80, 0x80, 0x1, 0x0, 0x0, [{r0, 0x0, 0x911}]}) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x1, 0x0) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000100)=0x1, 0x1) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f00000000c0)=0xe0000000000, 0x4) [ 855.900584] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:27:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000079a000/0x4000)=nil, 0x4000, 0x1001000008) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12150}, 0x2) 04:27:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 04:27:41 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0xfffffffffffffffc, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:41 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5e, 0x0, 0x0) 04:27:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18) 04:27:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f0000000000)={0x4, 0x0, &(0x7f00001e3000/0x3000)=nil}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) uselib(&(0x7f0000000040)='./file0\x00') ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) 04:27:41 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12151}, 0x2) 04:27:41 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = socket$inet(0x2, 0x3, 0x7fffffff) setsockopt$inet_buf(r1, 0x0, 0x23, &(0x7f00000000c0)="a865fec242496cdda65eccaf28a20c66fd178831209091105b71530d5182513286ac2be67039c4c1b58f4f03a7f354f580e1fd1ac2ea4a38c814acce84ec2e9e58ce28a0b37c0a2c7bc9f5ca", 0x4c) 04:27:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, 0x0, 0x0) getdents(r0, 0x0, 0x0) [ 856.663321] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:27:41 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12152}, 0x2) 04:27:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x400, 0x0) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000040)={0x2, 0x3}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:41 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000258000/0x3000)=nil, 0x3000, 0x200000c) r0 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/btrfs-control\x00', 0x181002, 0x0) getsockopt$inet6_tcp_int(r0, 0x6, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_X86_SET_MCE(r0, 0x4040ae9e, &(0x7f0000000100)={0x0, 0x6000, 0x9, 0xd, 0x1f}) syz_open_dev$loop(0x0, 0x4, 0x20ffff) r1 = socket$inet6(0xa, 0x5, 0x108) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r1, 0x84, 0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4000000005, 0x400000000000000e, 0x8000, 0x2000008000000001, 0x1}, 0x2c) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r2, 0x1000008912, &(0x7f0000000000)="0adc1f123c123f3188b070") bpf$MAP_CREATE(0x2, &(0x7f0000000000)={0x3, 0x0, 0x73fffb, 0x0, 0x820000, 0x0}, 0x2c) r3 = syz_open_dev$media(0x0, 0x0, 0x0) io_cancel(0x0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x5, 0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0) r4 = openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCGPGRP(r3, 0x540f, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000080)={0x20, 0x37, 0x2, {0x1, 0x1, 0x6, 0x0, 0x2, '),'}}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000280)='/selinux/enforce\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r5, 0x40045532, &(0x7f00000001c0)) ioctl$IMADDTIMER(r3, 0x80044940, &(0x7f0000000000)=0xffffffffffffffff) ioctl$ASHMEM_GET_SIZE(r4, 0x7704, 0x0) r6 = openat$audio(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/audio\x00', 0x140202, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') ioctl$UI_SET_PROPBIT(r6, 0x4004556e, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f0000000480)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r7, r6) io_setup(0x8, &(0x7f0000000140)) 04:27:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:27:41 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12153}, 0x2) 04:27:42 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x5f, 0x0, 0x0) 04:27:42 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000000), 0x0) 04:27:42 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29) 04:27:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:27:42 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12154}, 0x2) 04:27:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x200) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x10000, 0x402000) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x410a, 0x7ff, 0x3b7, 0x8}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:42 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12155}, 0x2) 04:27:42 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f0000000080)) readv(r0, &(0x7f0000002340), 0x1000000000000075) r2 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/mls\x00', 0x0, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f00000000c0)={0x1}, 0x4) 04:27:42 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0\x00\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r0, 0x0, 0x0) socketpair$unix(0x1, 0x80002, 0x0, &(0x7f0000000340)={0xffffffffffffffff}) r2 = dup2(r1, r1) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) utimensat(r0, 0x0, &(0x7f00000006c0), 0x0) getdents(0xffffffffffffffff, 0x0, 0x0) 04:27:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x181d00, 0x0) openat$cgroup_ro(r1, &(0x7f0000000040)='cpuacct.usage_all\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:42 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12156}, 0x2) 04:27:42 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000440)=""/46, 0x2e) r3 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000c04000/0x2000)=nil, 0x2000, &(0x7f0000000480)=""/4096) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000064b000/0x3000)=nil) munlockall() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x0, 0x0, 0x20000, r6}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r6}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r6}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c) ioctl(r7, 0x2, &(0x7f0000000040)) r8 = syz_open_dev$evdev(&(0x7f0000001900)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0}) accept$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) [ 858.030166] FAT-fs (loop2): bogus number of reserved sectors [ 858.036313] FAT-fs (loop2): Can't find a valid FAT filesystem 04:27:43 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x60, 0x0, 0x0) 04:27:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) 04:27:43 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x400a01, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f0000000180)=@bpq0='bpq0\x00', 0x10) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000200)=0x2, &(0x7f0000000240)=0x1) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x145280, 0x0) getsockopt$netrom_NETROM_IDLE(r2, 0x103, 0x7, &(0x7f00000000c0)=0x91, &(0x7f0000000100)=0x4) 04:27:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0) 04:27:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12157}, 0x2) 04:27:43 executing program 2: r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0xa0001, 0x0) fdatasync(r0) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x584c07d9, &(0x7f0000000980), 0x100000000000008a, 0x0, 0xfffffffffffffe03}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='ns\x00') getdents(r2, &(0x7f0000000440)=""/46, 0x2e) r3 = socket$inet6(0xa, 0x3, 0x2) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mincore(&(0x7f0000c04000/0x2000)=nil, 0x2000, &(0x7f0000000480)=""/4096) mmap(&(0x7f00009fd000/0x600000)=nil, 0x600000, 0x0, 0x6031, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000a94000/0x2000)=nil, 0x2000, 0x3000, 0x3, &(0x7f000064b000/0x3000)=nil) munlockall() r4 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r4, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000340)=0xffa7) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r5 = socket(0xa, 0x1, 0x0) write$P9_RFLUSH(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'lo\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xed\x1f', 0x0}) ioctl$TIOCLINUX7(r0, 0x541c, &(0x7f0000000240)={0x7, 0x5}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000080)={@initdev={0xfe, 0x88, [], 0x0, 0x0}, @remote, @mcast2, 0xf5d, 0x4, 0x0, 0x0, 0x0, 0x20000, r6}) fcntl$F_GET_RW_HINT(r1, 0x40b, &(0x7f0000000300)) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f00000002c0)={@remote, 0x7e, r6}) ioctl$sock_inet6_SIOCADDRT(r5, 0x890b, &(0x7f0000000180)={@mcast2, @mcast1, @loopback, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffb8fa, 0x83420004, r6}) getsockopt$IP_VS_SO_GET_SERVICES(r3, 0x0, 0x482, &(0x7f00000014c0)=""/205, &(0x7f0000000100)=0xfffffffffffffc87) syz_mount_image$vfat(&(0x7f0000000200)='vfat\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x0, &(0x7f00000008c0), 0x0, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x6, 0xfab, 0x0, 0x3, 0x2, 0xffffffffffffff9c, 0x7}, 0x2c) ioctl(r7, 0x2, &(0x7f0000000040)) r8 = syz_open_dev$evdev(&(0x7f0000001900)='/dev/input/event#\x00', 0x0, 0x0) ioctl$EVIOCSMASK(r8, 0x40104593, &(0x7f0000001480)={0x1e, 0x0, 0x0}) accept$packet(r2, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000400)=0x14) 04:27:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x8000000000000, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x3, 0x2) ioctl$VT_SETMODE(r1, 0x5602, &(0x7f0000000040)={0x8a9b, 0x5, 0x6, 0x4, 0x1ff}) 04:27:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12158}, 0x2) 04:27:43 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) connect$nfc_llcp(r1, &(0x7f00000000c0)={0x27, 0x0, 0x0, 0x5, 0x1, 0xcf2, "ac00479c80013ff02226b6148fa37e1cf9777ceaa18b75ae726d06c78071200b3243ef4d5e482b50d68604a9580a2aa25da36393dc4236edd753cdb1f1c5fd", 0xf}, 0x60) [ 858.633614] FAT-fs (loop2): bogus number of reserved sectors [ 858.658603] FAT-fs (loop2): Can't find a valid FAT filesystem 04:27:43 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12159}, 0x2) 04:27:43 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 04:27:43 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x300) 04:27:44 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x61, 0x0, 0x0) 04:27:44 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7fffffff, 0x101100) setsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000100)=0x4, 0x4) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000140)={'ipvs\x00'}, &(0x7f0000000180)=0x1e) ioctl$RTC_VL_READ(r1, 0x80047013, &(0x7f00000000c0)) 04:27:44 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215a}, 0x2) 04:27:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x0, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000440)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="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"], 0x328}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) 04:27:44 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) 04:27:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3e8) 04:27:44 executing program 2: r0 = socket$key(0xf, 0x3, 0x2) r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee6b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="020b0001020000000000407500000000"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000000000000010000105000600200000000a00000000000000000500e50000070000001f0000000000000300000000000002000100f5000000020000020000000005000500000000000a00000000000000000000000000000000170000000000000000000000000000"], 0x80}}, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000002, 0x0) r2 = fcntl$dupfd(r0, 0x406, r1) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000003c0)={0x0, @dev, @remote}, &(0x7f0000000400)=0xc) ioctl$sock_inet6_SIOCADDRT(r2, 0x890b, &(0x7f0000000440)={@mcast1, @local, @dev={0xfe, 0x80, [], 0x16}, 0x6dad, 0x5, 0x8, 0x400, 0x7, 0x0, r3}) 04:27:44 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215b}, 0x2) 04:27:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cachefiles\x00', 0x80, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f0000000200)='syz1\x00') ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000040)={0x2, 0x1, 0x1, 0x80000001, &(0x7f0000000000)=[{}]}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video1\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = msgget(0x3, 0x1c1) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000140)=""/125) 04:27:44 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = socket$bt_rfcomm(0x1f, 0x1000800000000003, 0x3) r2 = dup3(r1, r1, 0x80000) getresuid(&(0x7f0000000000), &(0x7f00000000c0), &(0x7f0000000100)=0x0) getgroups(0x5, &(0x7f0000000140)=[0xee00, 0xee01, 0xee01, 0xee01, 0xffffffffffffffff]) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f0000000180)=[@sack_perm, @window={0x3, 0x40000000, 0x8001}, @mss={0x2, 0x7ff}, @window={0x3, 0x9, 0x1e99}], 0x4) write$FUSE_ATTR(r2, &(0x7f0000000200)={0x78, 0x0, 0x8, {0x8, 0x145a, 0x0, {0x4, 0x6, 0x9, 0x7, 0x1, 0x7, 0x7fff, 0x100000000, 0x2000, 0x5, 0x80, r3, r4, 0x8001, 0x4}}}, 0x78) 04:27:44 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x500) 04:27:44 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215c}, 0x2) 04:27:45 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x62, 0x0, 0x0) 04:27:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:45 executing program 1: umount2(&(0x7f0000000000)='./file0\x00', 0x4) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0), 0x243) 04:27:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215d}, 0x2) 04:27:45 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x0, 0x0}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x3) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000380), 0x0, &(0x7f00000002c0), &(0x7f0000000240)={0x23}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffe000/0x1000)=nil) r3 = socket(0x2, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@local}, &(0x7f0000000740)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r5) sendfile(r2, r2, &(0x7f0000000000)=0x12f, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x8000000000003e, 0x105}, 0x14}}, 0x400000000000) 04:27:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x700) 04:27:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215e}, 0x2) 04:27:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000285000/0x1000)=nil, 0x1000, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7f, 0x2) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f00000000c0)) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x480a02, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:45 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1215f}, 0x2) 04:27:45 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc00) 04:27:45 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f000054d000/0x1000)=nil, 0x1000, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x18040, 0x0) ioctl$PERF_EVENT_IOC_SET_BPF(r1, 0x40042408, r2) [ 860.719860] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present [ 860.757673] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:27:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x63, 0x0, 0x0) 04:27:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x0, 0x0}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x3) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000380), 0x0, &(0x7f00000002c0), &(0x7f0000000240)={0x23}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffe000/0x1000)=nil) r3 = socket(0x2, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@local}, &(0x7f0000000740)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r5) sendfile(r2, r2, &(0x7f0000000000)=0x12f, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x8000000000003e, 0x105}, 0x14}}, 0x400000000000) 04:27:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12160}, 0x2) 04:27:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x101880, 0x0) ioctl$SIOCX25SSUBSCRIP(r1, 0x89e1, &(0x7f00000000c0)={'veth1_to_bridge\x00', 0x8000, 0x200}) 04:27:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ipv6_route\x00') bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='^security{\x00', r1}, 0x10) 04:27:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf00) [ 861.192591] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:27:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12161}, 0x2) 04:27:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = getpgid(0xffffffffffffffff) perf_event_open(&(0x7f0000000000)={0x7, 0x70, 0x101, 0x1, 0xfffffffffffffff7, 0xfffffffffffffffc, 0x0, 0x4f15, 0x40, 0x3, 0xa118, 0x100000001, 0x26, 0x3, 0x100000000, 0xe47a, 0xfffffffffffff000, 0x9, 0x400, 0x83, 0x5, 0x3, 0x8, 0x7, 0x7fff, 0x5, 0x80000001, 0xfffffffffffffbb4, 0x1, 0x3, 0x200, 0x6, 0xd647, 0x80000001, 0x0, 0xfc7, 0x0, 0x6, 0x0, 0x9, 0xf1373f54972cf180, @perf_config_ext={0x8, 0x7f}, 0x240, 0x3, 0x6, 0x9, 0x3f, 0x2, 0x5}, r1, 0x9, 0xffffffffffffff9c, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:46 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000040)=""/107, 0x28d}], 0x10b5) readv(r0, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/222, 0xde}], 0x1) 04:27:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100) 04:27:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12162}, 0x2) 04:27:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x7fff, 0xaa04, 0x200, 0x2, 0x0, 0x0, 0xa0, 0x4, 0x5, 0x1, 0x48, 0x400efb83, 0x40, 0xd0, 0x33d, 0x9372, 0x0, 0x1000, 0x9, 0x8, 0x456, 0x1ff, 0xffffffffffffffff, 0x1, 0x400, 0x401, 0x0, 0x81, 0x80, 0x1a4, 0x7ff, 0x5, 0x5, 0x1, 0x200, 0x1, 0x0, 0x800, 0x1, @perf_config_ext={0x2, 0x8}, 0x3488, 0x7, 0x8, 0x0, 0x5e, 0x8, 0x6b}, r1, 0x8, 0xffffffffffffffff, 0x2) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:46 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12163}, 0x2) 04:27:46 executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x179, &(0x7f0000000140)=0x5) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000080)='./file0\x00') setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000005c0)={0x0, 0x0}, 0x10) fadvise64(0xffffffffffffffff, 0x0, 0x0, 0x0) setxattr$security_smack_entry(0x0, 0x0, 0x0, 0x0, 0x3) clone(0x2102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) openat$dir(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', 0x0, 0x0) ppoll(&(0x7f0000000380), 0x0, &(0x7f00000002c0), &(0x7f0000000240)={0x23}, 0x8) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/tcp\x00') prctl$PR_SET_MM(0x23, 0xf, &(0x7f0000ffe000/0x1000)=nil) r3 = socket(0x2, 0x0, 0x0) getsockopt$inet_mreqn(r1, 0x0, 0x24, &(0x7f0000000700)={@local}, &(0x7f0000000740)=0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0, 0x0}, &(0x7f00000001c0)=0xc) fstat(r2, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r3, r4, r5) sendfile(r2, r2, &(0x7f0000000000)=0x12f, 0x4) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) fstat(0xffffffffffffffff, 0x0) fchown(r3, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)={0x14, 0x8000000000003e, 0x105}, 0x14}}, 0x400000000000) 04:27:46 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x64, 0x0, 0x0) 04:27:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x90880, 0x0) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYBLOB="ac1e0001ac1414aa000000000400000000000003ac1e0101ac1e48ac149236130100ffffffff32bef70b987dd97bccee526aaf1cb8de9c6f"], 0x20) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:46 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800) 04:27:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x9, 0x200) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x7, 0x40) getsockopt$TIPC_NODE_RECVQ_DEPTH(r1, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000000080)=0x4) mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000004) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0xc0, 0x0) 04:27:47 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12164}, 0x2) 04:27:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000000)) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0x7fffffff, 0x0, 0x101, 0xffffffff80000001}, 0x10) 04:27:47 executing program 1: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vsock\x00', 0x100, 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000200)={{{@in=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000300)=0xe8) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0, 0x0}, &(0x7f0000000380)=0xc) getresuid(&(0x7f00000003c0), &(0x7f0000000400), &(0x7f0000000440)=0x0) r4 = geteuid() mount$fuseblk(&(0x7f00000000c0)='/dev/loop0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='fuseblk\x00', 0x110002, &(0x7f0000000480)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0xe000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x9}}], [{@fowner_gt={'fowner>', r3}}, {@euid_eq={'euid', 0x3d, r4}}]}}) r5 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r5, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x121100, 0x0) 04:27:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000) 04:27:47 executing program 2: r0 = socket$inet(0x2, 0x3, 0x19) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000002c0)={@multicast2, @local, 0x0, 0x2, [@loopback]}, 0x200002d4) 04:27:47 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x12165}, 0x2) 04:27:47 executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000440)='pagemap\x00') sendfile(r1, r2, &(0x7f0000000040)=0x400a0000, 0x8001) 04:27:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_TIMER_IOCTL_PAUSE(r0, 0x54a3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:47 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x65, 0x0, 0x0) 04:27:47 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6b6b6b}, 0x2) 04:27:47 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900) 04:27:47 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000000)={0x51, 0x1, 0x9, 0x3f, 0x100000000}) 04:27:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000200)=0x10, 0x80000) setsockopt$sock_void(r1, 0x1, 0x3f, 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x101000, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x4) ioctl$GIO_UNISCRNMAP(r2, 0x4b69, &(0x7f0000000100)=""/199) 04:27:47 executing program 2: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.cpu\x00', 0x200002, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000700)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) 04:27:48 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1000000}, 0x2) 04:27:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x0, 0x3) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x208c, 0x200) ioctl$VIDIOC_ENUM_FMT(r1, 0xc0405602, &(0x7f0000000040)={0x1000, 0x1, 0x2, "5f87ab2f0f968173a2c52b692b28d0043cb225e347724faafda5d8a1551e0ee7", 0x20303159}) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) readv(r1, &(0x7f00000005c0)=[{&(0x7f00000000c0)=""/105, 0x69}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000000140)=""/239, 0xef}, {&(0x7f0000000240)=""/74, 0x4a}, {&(0x7f00000002c0)=""/134, 0x86}, {&(0x7f0000000380)=""/229, 0xe5}, {&(0x7f0000000480)=""/95, 0x5f}, {&(0x7f0000000500)=""/108, 0x6c}, {&(0x7f0000000580)=""/56, 0x38}], 0x9) 04:27:48 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x2000) statx(r1, &(0x7f00000000c0)='./file0\x00', 0x1100, 0x0, &(0x7f0000000200)) 04:27:48 executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001040)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\x11\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\x19sT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6d\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7A\x91\x01;M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xecv:\x1ba=\xd7G\xd5)\xeap\xef\x02\x98\xff\xf5f\x160\xb9\x9ay\xec\x82i\xaf\x9b\xe1x\xae\xca\x17\xfe\xfb\x14\xfd=\x00\x97Z\x99\x9dy\xba\x89M\xba\xe4\xc1\xa6\xef_wjz\xec\xa3\x1fn\'$\x1e5\xafW\xd8($\xe9m\a\xe6:?E\x96~\x0e\xe8Y\xbbn\x0f\'\x96\x1f\xf9)^\"\x95I\x94b\x12\xdd\xc3G\xf0\xa6\xb58g\xe4\xb6\xe4\x17\x1aR\xd6\x9f\x9c\xf0\x1b\xf2\xf6\x7fl\xdf\x1cm\x7f\xb2\xb0\xb1\xe3&H{\xcf\aO\x06\xff\xc8\xfb\xe7$\xb5\xbf\x04\xc6\xb37\x93\x96\x89VM\xe1\xd8\xe3\x84\xe1\xb0^=\x8ff\xb9\x1b\xea\xf92b\xf5\xe1u\xea\xc0v\xaa\xd1[|\xd2I\xc2,C\xf9\xc5v(\xdc\x97\x12W\a*6\x96\xc6~\x17\xdc\xe5T\x90\xc9\xa0\x82\\', 0x0, 0x0) r2 = dup3(r0, r1, 0x0) sendmsg$TIPC_CMD_SET_LINK_PRI(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) 04:27:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget(0x1, 0x81) ioctl$PPPOEIOCSFWD(r1, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x4, @broadcast, 'veth1\x00'}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) 04:27:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f00) 04:27:48 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x66, 0x0, 0x0) 04:27:48 executing program 1: r0 = socket$inet(0x2b, 0x1, 0x0) bind$inet(r0, &(0x7f0000000280)={0x2, 0x4e23, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000001c0)={0x2, 0x4e23}, 0x10) sendto(r0, 0x0, 0x0, 0x24000084, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x8000, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0, 0x2}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0xfd6}, &(0x7f0000000180)=0x8) connect$vsock_dgram(r2, &(0x7f0000000200), 0x10) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) r4 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r4, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:48 executing program 2: clone(0x207ffd, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = syz_open_procfs(0x0, &(0x7f0000000080)='syscall\x00') exit(0x0) capset(&(0x7f0000000040)={0x400000020080522}, &(0x7f0000000000)) sendfile(r0, r0, 0x0, 0x20000000002) 04:27:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000100)='/dev/input/mouse#\x00', 0x9, 0x480101) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000140)=[@in6={0xa, 0x4e24, 0x3, @loopback, 0x5}, @in6={0xa, 0x4e21, 0x5, @rand_addr="9f8e728dedbe400152dc03cf8745f883", 0xac8d}, @in={0x2, 0x4e20, @multicast1}, @in={0x2, 0x4e21, @multicast2}, @in={0x2, 0x4e22, @broadcast}, @in6={0xa, 0x4e20, 0xffffffffffffff7e, @rand_addr="d41ba1e940bb7754741640bb0717bcc0", 0x2}], 0x84) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000000)={'filter\x00'}, &(0x7f0000000080)=0x54) 04:27:48 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000) 04:27:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x5, 0x400000000002) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:58 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2000000}, 0x2) 04:27:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ff) 04:27:58 executing program 1: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x5, 0x200000) ioctl$KVM_GET_PIT2(r0, 0x8070ae9f, &(0x7f00000000c0)) flock(r0, 0x4) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x8375, 0x80900) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f0000000040)={0x0, {0x1, 0x6, 0x2, 0x5}}) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:27:58 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x67, 0x0, 0x0) 04:27:58 executing program 2: clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x200000000000013, &(0x7f00000003c0)=0x400100000001, 0x4) connect$inet6(r0, &(0x7f0000000080), 0x1c) r1 = dup2(r0, r0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000440), 0x176dd) clone(0x40000000000300, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000380)=[@window={0x3, 0x0, 0x800}, @sack_perm], 0x200000000000014e) accept4$inet6(r0, 0x0, 0x0, 0x0) 04:27:58 executing program 3: r0 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) ioctl$BINDER_SET_MAX_THREADS(r0, 0x40046205, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 04:27:58 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803) 04:27:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f00000000c0)=""/212) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:27:58 executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000003c0)={'eql\x00', 0xc002}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x339) ioctl$sock_ifreq(r1, 0x8914, &(0x7f0000000240)={'eql\x00\x00\x00\xa9[\x00', @ifru_mtu=0x1}) 04:27:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) msgget$private(0x0, 0x422) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x410000, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000001080)={'raw\x00', 0x1000, "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"}, &(0x7f0000000040)=0x1024) r2 = accept(r1, &(0x7f0000000100)=@generic, &(0x7f0000000180)=0x80) ioctl$SIOCX25SCALLUSERDATA(r2, 0x89e5, &(0x7f00000001c0)={0x6, "d143610512ed656fbf56e132e99390e13167645eec6193403ebb4661353d968d259505c437ac8efeb81a26c748c06ef9aa6412cbd8b8676bf022047566b9e661757dd692208db9ba19c0a9f9f238f3ef7520aef3d0beeaecaa1f99db31392e25865df5c54f0aed411370d6d991e96c4387f97d0405e5350055fe1616c9c568f0"}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x58040, 0x4) 04:27:58 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) socketpair(0x5, 0x3, 0x80000000, &(0x7f0000000200)={0xffffffffffffffff}) getsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000240), &(0x7f0000000280)=0x4) r2 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x7ff, 0x4000) ioctl$SNDRV_TIMER_IOCTL_STATUS(r2, 0x80605414, &(0x7f00000000c0)=""/225) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:28:08 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2040000}, 0x2) 04:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffe0) 04:28:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) get_mempolicy(&(0x7f0000000000), &(0x7f0000000040), 0xfffffffffffff801, &(0x7f0000781000/0x4000)=nil, 0x4) 04:28:08 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ec2"]) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_NMI(r2, 0xae9a) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:28:08 executing program 1: socketpair(0x11, 0x1, 0x3ff, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0)='tls\x00', 0x4) getsockopt$inet_dccp_int(r1, 0x21, 0xf, &(0x7f0000000180), &(0x7f0000000200)=0x4) r2 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23, 0x685, @dev={0xfe, 0x80, [], 0x19}, 0x8}, 0x1c) setsockopt$inet6_opts(r0, 0x29, 0x39, &(0x7f0000000140)=@fragment={0xbf, 0x0, 0x78, 0x800, 0x0, 0xffffffffffff7fff, 0x67}, 0x8) readv(r2, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:28:08 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x68, 0x0, 0x0) 04:28:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) writev(r0, &(0x7f00000005c0)=[{&(0x7f0000000100)="f523b15969e0246ac4f132c69a37efe702aaa32198994f81c99cb801695c9060c2b16f4f4322129b0fa7cd4b3ee206fdc5f73a34774bbe8537e3b2da84cdf6ee41b15915757bc61d56ed06a05e10518f5a90d2756253531c5b75fa8941eb454cccee115f9bce41cb91ef83f79042d2117c10da8874b3e401408853f63c314318c8da932d11e8fd2076ab8975ec7c1ee20fd4f4f6715feed36b882107324ed643e5d34ad61d6eb855d8e55c75b698561ddbcb9423f17e62b05a4bfa7f00d6bee66f82efdeb8d0a1b2b2faa8bbc46b3f567efccf9d04f3d52d2a50d1f1163aa83f4766fdb84efbd67deb79bf0d6a6a28cbed2050983bd94d9f21", 0xf9}, {&(0x7f0000000000)="6673880908fe254cc7f921116fc6ec3a83b61becae7491b8a9fc037a501740b803cfddb588fb611e3d1558c8c081ecbd6210b14e825a2f05943d91f87f7fcfd31143161e7ad889230ae3d1fe047612189669638d29958b581a304babd2e5e1b936d4523478abef1fded9f8b06934a0e03b201b522bb7f620e80d5514493d4a21ffda26c3ffbbcc2eba04a32168b0baca2ec3", 0x92}, {&(0x7f0000000200)="3948a7020074ee2cfacf43bfae12c442740a224bd7958e2f2d50317c25564140c45c9d095b89c5261b476187a3fe", 0x2e}, {&(0x7f0000000240)="acc70c840f43e2c2b0596c6269ff242bc95013f6662ed848006df271f93d0e982297e6c462cfd78f629cc9cfa21430696b", 0x31}, {&(0x7f0000000280)="e137f2684f512d", 0x7}, {&(0x7f00000002c0)="e4adca4a8b74cd3d14413d7862255e75b42797017d00284698cdbbb1898ea35d001f4a6a4993684602499544bde904dd0a871277e7037d489fc8b446bce45fd54f80e8596a52ea25b2ee9c50e9b6505efe3b566afcfb0325576f06fed6bd6359b1daeff4393e9b109d05ab7bf026bc55de1bcc87b82d5ac24c22350a3ccb80dd049a063a43faa864bb1689880405d7ecba39f0447a7889db051a8a3f9724b17b00874fbd23c91dcadc339a2e53113d6c5515e96c759ff3f0032ab6921dc27222305123f86b4a271bb4aa13d7a459b57ad6b7ba217af1864fcb35b9ec8aaf7a31dab8", 0xe2}, {&(0x7f00000003c0)="1117ddda62beede910530911038f94f6d497cd57f99795eaa01288e87a3f88e1d75cba1d4edd06ea8415ffae79d1bcc9ed2428880fc03e4e21", 0x39}, {&(0x7f0000000400)="a3054fd11eb3db414188801cc9e42259d0bd4f5e1fc09397d33bab7f66284c44083f6073be8068c15fd51fb1e5af4cf6a0192433b7f20bb4378103c472c0585d24871d641d0c73eb44a98ab4f2aa11cd429398f03cb8eb27ddbdae4bcedb44513f390a9d11f51a4439e0981aee1a0337349f9b78d4f228e38bea9bcc1a2452c4445dfa274b778d51183321a9fbb2da118be069ee6f75efafbdecd102a645b5174534c7456e4f5d24a40af2b238149dd927710c05c05e7059ffcc12b2ca1db436a3e574251d13ef008600e7b0c5fea86b22605bdbadff43d7aaa57e9bfcd5957d1c25db6b8b63c7faa82a14bb41e2524d451748e46b9d83", 0xf7}, {&(0x7f0000000500)="64a9e84af2315b40de40d83007ea38682da0b82031f9c0f31946384d8c2441ae7bf11606f3ba7c67a313c1ee9822fa6f047b217b59b5af7b5e6755f573d111b00317d5c894fac0eaa49800f5064cf2afe32922e77480f426041e8c64a540a7f63318584fab3117addc2b5983ba35bc217b984fabe5cb63b7210e1a5a95e2f87f9c7c7ac36983208d09ee62f9a51780dcd3521c79228d1aae59f52b70cefc57160adf0c5563b5007f19a7897f12f45a39", 0xb0}, {&(0x7f0000001080)="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", 0x1000}], 0xa) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:08 executing program 1: openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x2, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f00000000c0)) clock_gettime(0x1, &(0x7f0000000100)) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x1) 04:28:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000080)) 04:28:08 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfec00) 04:28:08 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x400000, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:28:08 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0xffffffffffffff83, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:18 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3000000}, 0x2) 04:28:18 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:28:18 executing program 3: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:28:18 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x231860) 04:28:18 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x2000001000008912, &(0x7f0000000100)="0adc1f123c123f3188b070") openat$pfkey(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0}, &(0x7f0000cab000)=0xc) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setresuid(0x0, r2, 0x0) r3 = inotify_init1(0x0) fcntl$setown(r3, 0x8, 0xffffffffffffffff) fcntl$getownex(r3, 0x10, &(0x7f0000000080)={0x0, 0x0}) process_vm_readv(r4, &(0x7f0000000380)=[{&(0x7f0000000340)=""/61, 0x3d}], 0x1, &(0x7f0000002540)=[{&(0x7f00000003c0)=""/63, 0x3f}], 0x1, 0x0) 04:28:18 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x69, 0x0, 0x0) 04:28:18 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0x2) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000140)='/dev/input/mouse#\x00', 0x2000006, 0x400280) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x800) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000080)={r2}) mprotect(&(0x7f00005e6000/0x2000)=nil, 0x2000, 0x80000000004) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) mprotect(&(0x7f00005e4000/0xe000)=nil, 0xe000, 0xc) [ 894.007004] ptrace attach of "/root/syz-executor.2"[8022] was attempted by "/root/syz-executor.2"[10796] 04:28:19 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/4096}, {&(0x7f00000000c0)=""/78}, {}], 0x2ea) 04:28:19 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpu.stat\x00', 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x3, 0x12) socketpair(0x0, 0x0, 0x1000, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='.^s\xcc\x9c\xd4\xb9\xc2\x1f/cgroup.c', 0x200002, 0x0) getpid() setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000040)=0x6, 0x4) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) write$cgroup_pid(r1, 0x0, 0x0) ioctl$PERF_EVENT_IOC_PAUSE_OUTPUT(r1, 0x40086602, 0x400007) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$SIOCX25GSUBSCRIP(r0, 0x89e0, &(0x7f0000000240)={'rose0\x00', 0x6, 0x81}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0xff4a) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[], 0x20032600) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a0f, 0x1700) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)='ip6tnl0\x00') geteuid() 04:28:19 executing program 1: arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0x800) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) ioctl$SIOCAX25CTLCON(r1, 0x89e8, &(0x7f00000000c0)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xb, 0x5, 0x4, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast]}) [ 894.175566] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:28:19 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff) 04:28:19 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x204000, 0x1) openat$cgroup_ro(r1, &(0x7f0000000040)='memory.stat\x00', 0x0, 0x0) sysfs$3(0x3) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 894.346987] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:28:29 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x4000000}, 0x2) 04:28:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') sendmsg$IPVS_CMD_GET_DAEMON(r0, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="2452887758fe7e6b7f59a5db968f40c9b5a1812c736318230000000000000000", @ANYRES16=r1, @ANYBLOB="100025bd7000fcdbdf250b00000008000400050000000800040008000000"], 0x24}, 0x1, 0x0, 0x0, 0x4800}, 0x20000000) r2 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000280)='/dev/vcsa#\x00', 0x100000001, 0x101a00) ioctl$SIOCAX25GETINFO(r3, 0x89ed, &(0x7f00000002c0)) mprotect(&(0x7f00000de000/0x1000)=nil, 0x1000, 0x8) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer\x00', 0x800, 0x0) getpeername$packet(r4, &(0x7f0000000780)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000007c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r3, 0x8936, &(0x7f0000000800)={@local, 0x50, r5}) ioctl$UI_SET_EVBIT(r4, 0x40045564, 0x17) r6 = fcntl$getown(r2, 0x9) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000100)={{0x6, 0x5, 0xfffffffffffffffb, 0x8, '\x00', 0x3}, 0x6, 0x30, 0xfcb1, r6, 0x8, 0x1, 'syz1\x00', &(0x7f0000000000)=['\x00', '/dev/snd/controlC#\x00', '/dev/snd/controlC#\x00', '^\\@*bdevtrustedposix_acl_accessmd5summime_typevmnet1+selfmd5sum\x00', '\x00', '/dev/snd/controlC#\x00', '$\\#,)GPLwlan1]vmnet0$\x00', '\x00'], 0x92, [], [0x58, 0x4, 0x30, 0xc4]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f00) 04:28:29 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6a, 0x0, 0x0) 04:28:29 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) openat$random(0xffffffffffffff9c, &(0x7f0000000100)='/dev/urandom\x00', 0x200, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(r1, 0x29, 0x41, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)=0x11c) accept(r1, &(0x7f0000000140)=@vsock={0x28, 0x0, 0x0, @host}, &(0x7f0000000200)=0x80) 04:28:29 executing program 2: r0 = syz_open_dev$video(&(0x7f0000000280)='/dev/video#\x00', 0x9, 0x0) ioctl$VIDIOC_QUERY_DV_TIMINGS(r0, 0x80845663, 0x0) 04:28:29 executing program 2: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x0, 0x0) r1 = dup(r0) read$FUSE(r1, 0x0, 0x0) 04:28:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0xfffffffffffffffe) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:29 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$swradio(&(0x7f0000000000)='/dev/swradio#\x00', 0x0, 0x2) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f00000000c0)={0x0, 0x1, [0x7fffffff, 0x40, 0x3ff, 0x8000, 0x8, 0x3, 0x3, 0x6]}) 04:28:29 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000) [ 904.426812] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:28:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) fcntl$addseals(r1, 0x409, 0x6) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:29 executing program 2: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000919000/0x400000)=nil, 0x400000, 0xffffffffffffffff, 0x8031, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) [ 904.561182] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:28:29 executing program 1: readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0xc8) 04:28:39 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x5000000}, 0x2) 04:28:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xfb, 0x22bcc83c}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x2000000) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000080) 04:28:39 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x64}], 0x2f4) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x1, 0x0) write$UHID_INPUT2(r1, &(0x7f00000005c0)={0xc, 0x7b, "7950a770f87137cada814729d42e087e0b84bd853cc0ac11ad550ea9aab0ef265d4f7ae0a303477ebed7d41e3235eb676c36e38e347a13146a57ccfa116a85e4878cf52ce0079652642c8d67aa360e853b31965af39e1cd66930fe6f5c6dd36d71788b37bf9dcb73f234a73c4705a87ba969b5958496549193546c"}, 0x81) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') ustat(0xb19, &(0x7f0000001400)) r3 = gettid() r4 = getpid() tgkill(r3, r4, 0xb) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="c4014000", @ANYRES16=r2, @ANYBLOB="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"], 0x1c4}, 0x1, 0x0, 0x0, 0x24008004}, 0x48000) write$capi20_data(r1, &(0x7f0000000400)={{0x10, 0x5, 0x3, 0x80, 0x40, 0xffffffffffffff52}, 0x72, "0f5543fa0e3ed971d35ee991a6fcbb7a6f4602a98db797a6aa9f96114c076a14054530fe3038cfaa35dd58fff54c1eaa66f214fb52757287794a28b8b6796c74b0f7b555335e34671c843d94113d91447396fd2d7ec43a08bed1314e7a00a60879750d08eb1e48901fe237919141d0fe86d2"}, 0x84) setsockopt$inet_opts(r1, 0x0, 0x4, &(0x7f0000002380)="66b95cc54423696a37f8eba77db361175580f4250d3d9e1121fb86a1e14eefad93e41de9bfb2180d72a33bbdcb387ea3ff767cdc6a2e3913f8b9406a38de976fa0e081bc4f24bc1f84f5c8fc67b1bffb72e8f0a092a9deefe5bffee1c929f721179f4e9221f5f21f5ad75d95b97037de9d815179a58c1ec48c719a241e45f236ecf50b201cb6f08554d11cd605e53d0aec5c240153b8fe447e21a9597f0891ad042ef029fa3a90f453ee920f2a2f011cd3ee5cc07aa4543074c18a5c465d509b32e5c0fac037cb00e44a8745beccc3db7415a060b32312da1bd8b38281164ea8456eb586b2f56adeed994f846f4fb5de88a17efe7a2ecfd0662b28003afc464d91aa1bbfb3f6f4079d9c72876f3a38ad8410380ed96ea40dfb885b9401cee85639c6d098beff3a70210396d096dc655a5ad21076f6910ca45913be7808ef481cbbb247633687795a2aac60cd8e061de26bfc34e9c6725321d69161da4832ab00d62f4e60197364c6647d98bbb321c737a8da25ddb0ba15a07bc5408f03d512267de18b45e71507b92a1e83b9db8907299a67e920226fcf35ad0d0d955eb8845e01258e79b37e404e378fbb6503aeb31dbbf8202293f1bee4c6a326c83c10b6a661cf0d65429491b6d14a731c57a9bc17bbd11f5ecd96b48c47ee1872a3379673693061a509ee50cfe85c7042b56fefca53b4baff4f5e2751331d6f41b03220d01dd8751686f9468350609d3b02b5e67e3e61cf36842a6f463d2e44e2188ad403277a4e3c47c0fee159e60fa319e815a004c270f2de7b8b7645c7c99601d8d2a8fef0aafb3e0bc4d4dec3939bf1fa2acd5d2f574a66f37555913c6b449d6957839bc7c1780d30dd8a19c138df8ea94a0080cb545b9db78485c2ea1e7a09a2cf5b1cc5c3e48fc8c78844b7830bc88278129cfabef573212900736b89bb9772f8a80a1c243945df8f542a760974461eb4f646f2c62023916e250d3571848efacfcbbd0a8b4117851118bc2339df3973ef5428b348b2f261591e286b6f92614adfa80dc7f23b14be1c085e63c41d57e04282d08d32b55d0733cef192b6ef4a461df4f943deb53ae0527b40c52c9a70b14ef3bf7a98f0bbdb2abb45dbbce39953511963fe5b8f6d4f2a5390c57402aedb664919c7db0160599a19ba0d6991ba67905b0eba4822e8495a7810954c38e5b6b65b497cee25290ddc2b0007c4cd983847bb7778ee0b415afa13f203c4da7fd616dc94d3d69be7b13dd913755639ad76ff83c75163135bd828a68958bbb5576efd2a2e2c3cb9769c6d219b03308cfb119f34c5e35df57dec7c54acd33917c2b45464a43e06eaab980065e68c5152a7f11e8b269552df948758d2a3a6f025a6563177a5e2e73bfc2d268cddfcb33cb54b996c36b3f830c8fa1a843cab254a1b69747a10f6e715abe3f3ca166bf923d6dc3e43a85e06e6349e566a5eacf7b99efe63d8ed196671a6f8c5191e668e69ab2758b0c2ccdfdb844c91fb05b8f7148c556a0cea825c292622dc7142a937173a454fcf7a7a6de4f0b02983762b4f1e00aa32e410c9ba98810f9a8e9580d6fc6b0586d434bf93751e70912c8b9d43c7837fb6861d46af7335b0a0384136e5dc6554d93e57e2101d5be59397c023196f22c31704453744428ee64e6d6d53efbc8d2a17fb1ad8287ac53a704be52e9f218725defc631d2ec3e8f3420d911817d6801a38ef2c66b7141a88231a271f6bdffcf2f19f577af1f097190d1abdc221fac776b24e3d69c77603c3b56b4361087bbf2d5e3666f4a96b51f1fa8defc667bcbc14127e9734302cf43a381e4020e03f418bd385366e7f2977a2c463a0d03186b36ec921e2785b7df7b710813d5846c7dc9a7c80630b7fd23ddd6aba67744b595e6cfe77d4ddbe71e7422b3ad507c68ef77cc71f5cac30caec247f1a152c1a9a641d9e2b27ee7ef478d48adb53c21a47aeb9f9464ecdaf4f50482bd6084881dc1ad5981a8579d61cc25f0431fdb53994b8cb9df20632e47077f6ff4ea429b4d3d7b21e25be8d5a2c8be95f5e03b98cd5724485607808fe5287a2657052a9fc385acee155755228701de306341155f396ac97f6ccc302019ec6576137907d591956fc75b8f0bb8d4cc9bfbf977379777869c4a0e07b7a233e1370e5516f73ed038c5e61241ac3e92758cd45a76128dd2a701178b6bc9d1edcc5f5a01eaa917388316017f91a894e14b1d075670a90f5d8dce5e56f03c9b357ab1e44ee7ef095fb137607b3345b3c47cc5761a7668cbf66c3d2e60e6ebbf26a55da0c41a6ce2a9d6b35c06f7e62926468428edec70ce6b998c8f68c458d6025ec3deda841e22bc66f0669bc122ea9339be244318f005d0d3284e2839de2a2fd3f9fd147da35cd73d9079a186d7317d520a0797679f448b57d0a962fef7825dc3b2677f5dfdab6f7dbf919ba1f0c7d1dc219cff10e957180b71155ff9b24c55d21be1c486af73258eb85d64eafd31f5d8459ef215aa9ed7bdc6d01bbf035fd1c32182d2cea633505a280c0bab9a3f4e87983bcca800e9574296b5ac5414887d21b9adbd6bf78ff5d44a901a51c74b23964e910c73e1671707a23006f740b7ae52dbfeb332a2b8bbd4e8e3323d8cb40b71b618a874f866c542871ac6da7dec78e39c6e5516dcd497c7bd5517d429ee8e7a58df84d62870e6c293ebbf6defd8c0a062ca62faef8929a2762e9d804a00b58dcfdbf2a0188a90860eb87ccc79200e611069caca6da5abb7930fcb6605c53893f6ad9a74ea1c4c4f0a127f6c59d3d03f9a0bb8ea3948eadd31c36be1e6d6d9eb1c501cbb7fa2164b0d43f6787ce5bcd66eeefd73a8f728b55502bdb78724188bd25ef1afda38bea248978dc809344965383a8934b0f7dc52efb92bf494b618906917731e67738a74928e039c3b7f57c8bdff40f747d47ef430ac0d01869b8a5b622ceec2cb20fabf53b75c5a71e127891c620a045972fc76df0dcf12a025743a5ec565eaca1a3f482ee6eae9dfb09532800b2f9fb3d89f9b28a96c63191061f5b7e6d477a4bf8ba8df48c0d1b617aaddc45aca3dfd50f40cd4037d5802c113dda7c94b0bfa4d06f7f0dd1eda1b8f8b67620eb3e1b9683bc7e689ebc2804d9cd3e1b2284bc3db17cc4603f6a7153c6a8644cab8076793e2ffab011a5595801a645887f829b894d2776c9a87b4b7e925adc9e6e43ade2c0906b1a9052963002f7afaa1f7fd7979da41038d3c9bd1a6f80278e6cc94fcb1765f2bea1e54f97696537ccf9228793c5facfc52a82386f289daf7e87560b9c6e13a162e2004540d4b8955ad103a5e5fdfe0099095cf5dec7da63d26a39e45e0afb31cb892499c67b96d280e87b4a33120c346eaccd26281e8a5bd31941c1e1a7467543a9285292e483d7e5cb320890b1b2640d4fd70fb96421b937552cbf79a93d638e99a981cd9bdf96ed0deab950468a63ceafabe1fa123efcc5afbedc4b611efeb331a9b9e16f131700a83bc488eaac2e2bd6469aef92129323c41cd083e1bdf2e0dd8209593a6b365d990e0885e6676db5a7efa2e66208d3ecb72e7b2e2375895fa2ac1b57d66f579cc970cb56ea217cf2e758e4971614fd4c57c55a315317d50cee342510a4afea0136bb6b138f070719b566838d9b6205f25b9cb615409916058348efa60ed963b1493e502c011fe7e0ca6acfa10e3aa685310b931771534e2c7481cf366684ff53ed68dc6f492e84a9a70ab8dd5dcf1a7a13338bc7f84007c72ef51888b1251cd20400b8f989f06e567c6cdf480f6f62cbf43faf4f80f5bd24dd6841c85e1a43882481decf259e78d85440c794452ca6b78d5282e918b37a3fbfdaad383db72b53245b60803fe40d6d62cea4c3359814cafaa4784e819c36c4f207d8a10eee91016a3e67c83d6eb17fedf8e3840717b1e20079e418c5b3a8a48b271bb4233d85679d77d24b9da3825b4d4365140e4d9043dae5064f1369891baf0f5cbe645487ab4e912b9c4fe27714776087ecb908fb9682ac34a9428ab818be0fbe8433e0ea8475f625043db662be81cfc78200ea77d2f4f72110bd6c397833609bd298bee5c60509a330bc818b22f5319c3eb78e126c1d3c33f4d53bed258ff7a22242949b139c9ac750c2c70532496765402561a3a3280f9c260d2a535156c2acb400a4c933cf9925ad4d808ec781d24608a2c1edaec108e0e9ca576a02fded07432b18ac8e33d88594f54c21260ce602ccc2998b4594e63d07c6b527b695b46189460c7de0fd02342a01e5a9869b02c03cc3c825e62d2ab81005a0fd4a286fc67e649e04becdbac92aa2288258506c212df32003342679c2346a9c56b3050625d527264e387f9f6df1fb41955f614affeed1f8784bc81e140c5942c2549681bac158ef6595a58a311a11af405f0861f5218d07cda2b2f0244979c716046b9d269ef258874142c04e0c313a5f20d017f8b2e6950a3d8c5f3bf647928e79561b4240eda28f49278850c3fbdc55a38c12843d844787f6b053b008e9d8cd897b390d73198813ede2793c9d45f40b1dbc2563bbeea72afb3f62b196009cad02485009ac8ca214db169e7829184f01120db6ca65124592bfc2be9f7ed5fd144f1c256eb4f1de6c90454de0c7f8350ba32375fd70f8a8d7721fac51b520be0a87eeddcb1f57065149680cfadeaf7e79518af0040caa0a5592114fa4e2dd1d684232fea55fe51f74279086fa02187709b982aaca5a6d3cf049dcf7edee8d3206886739eb0edd62f9e38a2fe6527b0bc1b04d7a06c1d809d2650f89a2f6ceba54cb872316195e126e6a19853cc2ecfb226448d0b134ec829c6127480f6175bb550e302dd55c076d4158ceb7fc8bd9bea605dade08fc48e93812f55b32934db3f514b34b97b81e6fccfdecd557eebf4c974e5842bb0e5e915a07e40389fa0a7f6c3e7e57f8fb79d46e2f05e2926e178cbfa334e58fc03a9f0e31174a924d6506749009afd80cfaae592f5a8a0f6246db2f5db682669316958295a0e174edf24b866165d029fd15c1dca70b455a9f36ae868c5a35e56de045b4125148f5c5351981773f923430245699886a97e4992eff44742835cb68f97164090dce8ec0b73f2e9f6ee3331067eb1ced4b1122eed437b9a28a2876aed70249260e4340ecf37955ea2013f96a5fddc89f20d8b4451f5012a538a9510a3a624795e4dcb9a65e43ae276b6ea5d85a3bbb1b00953a0aa30b1ab6582f1ca6557fb90976e3c355cd9b133d87949f60ebae7fde9c277644428d13fd76a96c24bfeb127fee111ed0b5d65103eb7ee1ad66e6d39cc83210bb34699f3d567609de908312fa8f40d8da00a60616bf77257c63cae836ba680d8e2abbaa01a28eec5d5481a509820b93f93a1364aa96c4f6801c2982640edc7fbae2fd694387c88b18a53fbd1b09bddc5a3ce3b1cfdc64e17210f520cbb1c9720d14362b8e2e09f74776b6165c470a15b997424f619a97eabd476501a956ee9586f6c3e251146b542bb83f5d3c9a9dc742addfbfa77f5547cdb5284cb2330921ef6b251fa374b56fdaefc4bb9262879245a4dd083729ae89d81cdedfd11e68fc31d135c913144a849812ee84c83ca99382f0433df9094e6344395d353f618f4c60b78d55786abe148e673f1e44fe97599a218cc3cb372e562b042ad30bccd83a9ad49cb3cd300347fbe5d79486768a77cf6a2bd3104cd2dbe0b18bcbb298a7ace0f4c7736e669bdcde92ecfb5a421fcf5d4c3a470acc217f92dfdaf95246d262bced52d255127631666897d78a394f3ce89a7f", 0xd79) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000580)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)={0x14, r2, 0x401, 0x70bd25, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x4000000) 04:28:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:28:39 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6b, 0x0, 0x0) 04:28:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:39 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000) 04:28:39 executing program 1: r0 = syz_open_dev$radio(&(0x7f0000001380)='/dev/radio#\x00', 0x3, 0x2) ioctl$IMCLEAR_L2(r0, 0x80044946, &(0x7f00000013c0)=0x8001) r1 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r1, &(0x7f0000000180)=[{&(0x7f0000000200)=""/193, 0xc1}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/116, 0x74}], 0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001540)={&(0x7f0000001580)=ANY=[@ANYBLOB="9feb010018000000000000007800000090000000000100000976866331aaeaee9d303c82e1f9d02dffca966ba8f6be33b4aa2764dfbf89ce880fd346cd060dd0484e23c4d8e8ce9b7d1461611bd6a40a34318cf22db94374cc967ad2b55f899d2f93be5a3b96a05695be0cc2255a2cd4b24222186cad8b525136760000b7b3a3dbe8f3456a4b2f7e444a6c5569b80000005b4c9ce18150dc50e321bccde6ea977e657e56614bc2d861c304137e3cbf593fd21d9355c5eec7aa6e6900798e0964e7d74f7aa99f7e20570c408dc1e2d151b54f534d644efc8ab97ea03ba1b5c0d721018bbb915c2e66136de7152d43be9806507b2eec66d190fa216df9a106804cb88062c67b65dbfd3d61e14013d234b169c7b114fa86136369a858f1870a3a2360fba51c5acb7219b265905bd83ca67d905b44b003b6a4356b67d6bbb879429a353064"], &(0x7f0000001440)=""/217, 0xbc, 0xd9}, 0x20) accept(0xffffffffffffffff, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, &(0x7f0000000000)=0x80) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, &(0x7f0000000140)=0x8, 0x1) readv(r1, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:28:39 executing program 2: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0) syz_open_dev$cec(&(0x7f00000000c0)='/dev/cec#\x00', 0xffffffffffffffff, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:28:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:39 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$sock_inet_SIOCGIFBRDADDR(0xffffffffffffffff, 0x8919, &(0x7f00000000c0)={'veth0_to_team\x00', {0x2, 0x4e21, @rand_addr=0x73}}) 04:28:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3000000) 04:28:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x4000000000000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) 04:28:49 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x6000000}, 0x2) 04:28:49 executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x32600) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000040)) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00memor '], 0x7) write$cgroup_int(r2, &(0x7f0000000200), 0x44000) 04:28:49 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6c, 0x0, 0x0) 04:28:49 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$cgroup_ro(r0, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000640)={0xffffffffffffffff, r0, 0x0, 0x10, &(0x7f0000000600)='/dev/mISDNtimer\x00'}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000000680)={{{@in6=@empty, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in=@dev}}, &(0x7f0000000780)=0xe8) r4 = getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000007c0)={0x0}, &(0x7f0000000800)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000840)={{{@in6, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in6=@loopback}}, &(0x7f0000000940)=0xe8) stat(&(0x7f0000000980)='./file0\x00', &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000001bc0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001c00)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000001d00)=0xe8) getresgid(&(0x7f0000001d40), &(0x7f0000001d80), &(0x7f0000001dc0)=0x0) r11 = gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000001e00)={0x0, 0x0}, &(0x7f0000001e40)=0xc) fstat(r0, &(0x7f0000001e80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001f00)=0x0) getresuid(&(0x7f0000001f40)=0x0, &(0x7f0000001f80), &(0x7f0000001fc0)) getresgid(&(0x7f0000002000)=0x0, &(0x7f0000002040), &(0x7f0000002080)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000020c0)=0x0) getresuid(&(0x7f0000002100), &(0x7f0000002140)=0x0, &(0x7f0000002180)) r19 = getgid() r20 = getpgrp(0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000021c0)={{{@in=@local, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}}}, &(0x7f00000022c0)=0xe8) stat(&(0x7f0000000200)='./file0\x00', &(0x7f0000002380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r23 = getpgid(0xffffffffffffffff) stat(&(0x7f0000002840)='./file0\x00', &(0x7f0000002880)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002900)='./file0\x00', &(0x7f0000002940)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = fcntl$getown(r0, 0x9) fstat(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002a40)='./file0\x00', &(0x7f0000002a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000002b00)=0x0) r30 = getuid() getresgid(&(0x7f0000002b40), &(0x7f0000002b80), &(0x7f0000002bc0)=0x0) r32 = getpgid(0xffffffffffffffff) fstat(r0, &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003300)={0x0}, &(0x7f0000003340)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003380)={0x0, 0x0}, &(0x7f00000033c0)=0xc) fstat(r0, &(0x7f0000003400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r38 = getpgid(0xffffffffffffffff) r39 = geteuid() r40 = getgid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000034c0)={0x0, r0, 0x0, 0x1, &(0x7f0000003480)='\x00', 0xffffffffffffffff}, 0x30) lstat(&(0x7f0000003500)='./file0\x00', &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, 0x0}) r43 = getegid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000003600)={0x0, 0xffffffffffffff9c, 0x0, 0x1, &(0x7f00000035c0)='\x00', 0xffffffffffffffff}, 0x30) stat(&(0x7f0000003640)='./file0\x00', &(0x7f0000003680)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000003700)=[0x0, 0x0, 0xffffffffffffffff, 0xee00, 0x0, 0xee01]) r47 = getpid() r48 = geteuid() getresgid(&(0x7f0000003d00), &(0x7f0000003d40)=0x0, &(0x7f0000003d80)) r50 = getpgid(0xffffffffffffffff) lstat(&(0x7f0000003dc0)='./file0\x00', &(0x7f0000003e00)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x3, &(0x7f0000003e80)=[0xee01, 0xffffffffffffffff, 0x0]) ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000003ec0)=0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000003f00)={0x0, 0x0}, &(0x7f0000003f40)=0xc) lstat(&(0x7f0000003f80)='./file0\x00', &(0x7f0000003fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r56 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000004280)={{{@in=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@empty}}, &(0x7f0000004380)=0xe8) stat(&(0x7f00000043c0)='./file0\x00', &(0x7f0000004400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000004480)=0x0) r60 = getuid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000044c0)={0x0, 0x0, 0x0}, &(0x7f0000004500)=0xc) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000004880)=0x0) getresuid(&(0x7f00000048c0), &(0x7f0000004900), &(0x7f0000004940)=0x0) getgroups(0x5, &(0x7f0000004980)=[0xee00, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, r61]) r65 = gettid() lstat(&(0x7f00000049c0)='./file0\x00', &(0x7f0000004a00)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000004a80)={0x0, 0x0, 0x0}, &(0x7f0000004ac0)=0xc) sendmmsg$unix(r1, &(0x7f0000004c40)=[{&(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000000580)=[{&(0x7f0000000140)="7cc74345ec4c17254f0dc2ea5739070b387947634d6c072c8fa71c8ca273bbb4d160e42f8306ad4d3920945835357e43b6fe8472d438bc4fd894d9be8b2a072071e72864ca9fde9fa5a7b3f9b6b0", 0x4e}, {&(0x7f0000000200)}, {&(0x7f0000000240)="e17bf9b0b6f28ff69814a125eb28d3c85ffeac24270896f542815b2974686adaa0faf25842a39d59e50bb1ea5433a18b018600d247b56f0950e3fc6cd239fa1a679deaad8f6fc8533a0ca7c84d96a87ff6013c2eafa65bbb7aec139847761ad1f946c165aa585ffa0bdecbbb14ed5bca24020ebef9f43f9013b7b335519e21efa03d0c115232f18fbbb8d9eb4e86bb31f6a6eb1721", 0x95}, {&(0x7f0000000300)="643717af21c1142f8e7296c27226ce8d8e4ef4ac83e98e1c0b20621b2b0b662e57221ff2709434f1d13f9e4e9bb697799efa15f0ff7ee39293cbb05199e510d5a6cdcf0850b3e2350cd4e9ce0906077ff0b39bfd9a184a464b35fcc16357d09918cbfd25b3c6ad162c740e485e48812d2aeecb12bf04a833662b7c6c513080995b80ebf09f95c752e9b60aecb1e8ea6746f7d0af76d8b767655a799394e4595e30070d3ca5e58fcff215f4e8e775f82da15633789bbf9fccaa62bf58a6317648a0f38d0a8fc9fc847d34631e6e", 0xcd}, {&(0x7f0000000400)="6ce3b4c5ad41fd2e3462ef19573162991e6cd971d76fb8cee3d7689f19d130e60da413f7e55554c5250ba5e2cc0aac332af0e83e1fecc49821f57f50829fe0465d674942bf4d22e5e77c958bf0c247bebc18265f26553d632bff82ebb2c45feb2de24c5934a0aaa375d3be8a7324647f0b3a25d7d348a6ee00958c865990a53eb825629ef0c7fde0ff39cc3de8370bb9", 0x90}, {&(0x7f00000004c0)="29501f831414a854450237831e06c71979ecf70c996344995d552033d86732fa038c0668f59f6d580c136ebd230d1734bd5084c54a589603440d4641209dc53b87adfb4b8ba021a952286ea2e48938277f24ce49596fd0b499909a6eafde6e04c13acf548047a312754a36280f5c4119783262925b822959", 0x78}, {&(0x7f0000000540)="b8ba12c8", 0x4}], 0x7, &(0x7f0000000a40)=[@rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @rights={0x20, 0x1, 0x1, [r0, r0, r0, r0]}], 0xa0, 0x20000000}, {&(0x7f0000000b00)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000001b80)=[{&(0x7f0000000b80)="8b5296fc3e63b6c5990838b5fc13df3b8e3476c47f506966da4025ba890d21e9ddd801923514ec9ad1d37c23f9826f99fbc150bff1f1244364f0dd1f857033bad11f42640d4b15c531d338c2d59ff84296c19ce30da9f907bab0865ddb45d1e476ce7d1812e111c8999ea980c4c5e302baacc30f64a6cbd0848f4832b90ef9b57b118d150a73116bffb2e3788301e47f81f8a2bb4f161653bb4fb20cfc133448edd048cd90254eb77cd7fd82aca5d0ac191e22695f67c8ddffdacddb48ffd04de9effe7c91f26f6ec73ee736add3b608547e1bc2387147e8dbbf77f9aba906500339cfdad74d10d76216b6d8fdf24c1bb6568663b11b6898dd102023456123289c91143b2e4d9fc3bb72bf1194d283eade08e821ec01aa7581b22e98dc515043678db7617744af5493bd8c7fee2ab8c45eb0968b055a786ca50cf954f642285e99914dd718819762fb89537b0f4d6e13ba0aeb7f4c4556ce093a4c6212f4230c563f15e1e5442c170e82c9ff4ad2526a48ba68da6e3314ea2fcb98ad0dcb2ed8a22804d023d264eedd9bc405833dd3440d1215d22251b53109c4ed6b267f4c7020a3a2f4e3beb8fbdcf3773130ca5d8eb7bd85e25d2a94fd95eadcbebd7bf951f4bc3098b4968fd83a40f4460eab922bcf124888a396aa2981904b1063c5ef55327b394d802dfc8f8daa16a59e24a3c0a5e8e27f2f602991a16c279d09de61087ec60fbbb6467a4fd8afca57f70ecddec2fbb543320da8faf52c7251ca6ef19f1687e928063cbdfd13098568e55e71b1a9a14b3441699922f774d5297644ba03a5df95a8476a0d98a48a326db386bcc4f2853dfb9696dfa1d8cb5ed7dc1544f96650062ae3030af0d642f04975f12fb141cc0495324eab0758343d530c6bbb2f43494d9eef5bcde6bdacee912f7c64299af2e7f5c14716c8dfbaba4a76b6f7a5645076231d3716e6054186c20b1ec1e331bc86af9eddc673ab6250527701afd35c35d698c36ff32d9b3f6ba084a07db4fdb8cc943e7f6614678273ad5507600d3d5d2853fcb401aadc6508cf124845704dd43689649681b7df40b612b9d26d9191eeb673a47d17a6699eeed342d98a7a27a02f6f237e24792aa68b1357c85bb7cec0774635a17b7038dd6320248177451d324a229a4d2599bc8a033111ebaf75ea797b22825241fb39ae4cd21cc26070592c4347c3b002eba8c4ad78cfd6ae595606c16c4836599b1397ddf2a95fff22014e72f32b8d798ca204dacc9bc534963ff92e7bd9e1a33fc5e4b32b7dc4301ae0dad553f867c773f2b601e5d357dbfebae8c9007758a912523236ca97e4cab1af4fcfc3687405202151a399b72e2a1722469e6bf4cbf4d4f574629b25c96cf78ec50f44cbd75923f933ec786cb2791fdc0188ef67a36e44af2c88f6ea284c6e1f532f4aa4b1e60b6ecad02e4e5fb86613efc91a471d915eab5672e7dd1660244e16d0139e397bac90455cab4f3c2a7e375738e405b3565eba1eed99bee9f42bc916491bdde0cafd0083eec7e613d7a9c15680ca4f96ddb343d22fa156b5ac545dcdf8ab82abe3e267614b56b07dcbdf3769e8f98d3e00db9b721ca5869cb570540b49f379f1304fc886e8a7609bfe16a9eb77782fe98b8c96286cc02b0d77de388a2d70e573049bb39a0e2a7038c7d6fa75821dbd06006bfd2524b46b901cce83f8e35f9657fa81ddb00913dfdbde3002b67ab3c67364dc63119b198ae7df6ce427dbd0ba9fd34d0932c76e06e1f9b041db63fe9f99bd17cfe7c51bf5d0dc1311c3f749367d6b4dff6a76feace2ceb0be96764d82bb98eb4cf58cdc4d0f42ea229a9f68f80d903cc1fca9e9e98deabd5a24ae9383916717ecfce6e04bccf0283604ec77636cc7bee12dcb42a11ff73289f26a46d0df8aa7630952000f2c84247ef8e0e460d04ebcf3fae5e873c3463d4313409d2899514c8156358e303bf8f28067d80b78b1b82a822686736ee2538331cc527f94f561682c2ba60c29d8e01c49f30d11c55582481699597dabda826257b4acafc2266e3e49006d2aedd1a921023dbc46cdc0f2a930ab9ef38b19e972d444652c96eff30e19baa2b273dffde07f74a9a640400007e03edd36debf7e1f6513a2b5b25dde9831bd5e453337fbda8a172e5b66660db0cdd0cd9972d1ce96fbdbc46fa2e08fbe7f36350de276947d008e59dfc188dcb93df08e440a78276530c1069333ece286b12397ceb35685788269687a6bdcb4604ad8755293c5eccc2abef3541ad2b076ea6a23b66bed8e1785b83d0ff8b6eaf8713438a160c892981447132701f22ef91365e1c3ffd4e894541327dfd6a446e292dd0184ca5aba304ab84bdebecf1073496fbf445c620d1d9a7be7305f5ff362ec1af28d200081a273c9be5da8a208c61a463aaf32572fe030505f2e5aa609d69f95561da8b9b0e18bea374a84ce9c8d1c4c502590418a3d7e1e38df1dc63ebb940262034e72f6a7cbf6ecd98fcccc962f4cfe0843569eb6a992848829b7f891323fe7cf7efb0df54f0d34ec6267d10bd6f285382a8e9f528fdf3b5ac79d626d6e894914e8c1a696347a41205325643fcbd809192beae40c8c0c92c0320739ebb979919eafad06c753e668081428f3834810f36b236fd8fe8f21082ad1861fb0e16168d099399e4dadfc06bfca90a236eefe1085b0a2b2b432b3b00b35912feff6bc4fca50ea9242b903a7aa703ebb32df79be4d51ba83f1343630af4a858ef1a115b260645494960f05c1b70fe907576b3f1b02b9a425ff9b53ae1f2df75ffcc0002eae73799472f470ed88c8abf28a2cd5248659a1ab304863f6affb3df81eb3a2bfbe07e3c4bb0ad19ecdd57f2f6be73b0f8bdb2e8e3f9bd908b12e1214e33089caa9e3c5b8f66b554246ae97f542919f6ad5a0271c0f330c5302ad541002b674e6115213017497f50cd14abaab7b27113cbdf4e6a1250bde208260532d447ea80ee8d9a90949202fc2451e109f6ba818bfc5d5ab8791de8242cf6e21d9c15415a9663cf106d3d95491ab0b61459fe6166e4b472db79edb07dbc747a74adf277c421afdd808e3763847e4f81718e0128d8b0220d56214ac227d1287249e060a54cb51123d87adb0288a4b81fbfc785bc5cb1e4ef36b194f4c14b96ef9e2788ba4e07bcb4b3d3947ae7baf115cf17261a1c32e825b0ee8861c4fc42c0e8d85672e59eee113d1f6e99442b47f0cb0428e73e71c2114015f37f101fd2cc9e11b86d9c82f8c5cd101095936b15337d82f296a39fd0013a6e946cb849cecb76e95d8e8bd128e5108a7fa6a57d8d049e12c4e07997652dc518093cfd42a978976407d89148a2fea8d6d1cf7b8b04e2dea5c917cb1523f7760b3dca4b7ebfc17a2d2ab90e73dc0e2a0d69e126ea436402cafb4da4ed3f5db4495b214ae58486dceb328302b570cedc4ec191d282eedace715b831966d05e2e595ef08f979eb3203d15aa42c3baf269cb6fb142a923a7aa8e616fec0efc1ea3c17cfb8535cd2a1abded9c4956457ec401915550cdf4a102fd0769b2a911e7d006fedf7b9b041414ce72fb16c1418149dc7eb2dc7c002e7416dfe267baba96404062d1a438d3a0dfd525741d44b70b5ab1064f8a910e733204d5ba1dc81d4b25c6c55b77864a8b333992f5819ac7695869a5934534c48df429a6bfc6f16b33a81510bf01a5315c96895ce0dc6a05a17985b51319caaa9c7f45d7b8c15f0b9be29284624a8e7c363101ae65c269517f86ecb081eeb6683f25a347115658865ddf2d4e3f1141bf84742e3239aeba1e7f750db8bbfe5f913f4e8f6c565ed1f3dae13cfca3a9f88821af065bec61a6f160e2c05c4b24e178a8a9dacea196902e636b77a393ee499b3133cfdfcc065fde0c7be156b60645fbe174092f44810dc920f8b1c21f11d538695ef574db9b62769266176a734dbb2c859225f75bbb38ce97b2949e9693f4ee5a1ed4cc1ca788ee93011b42fb866c58837865917235f223edbcffb5d78b21709c9acabf13b1da7cc11eca31ad0668ac19925953bf3879c07847e0cb6a9f9805bd665a9c8c4eb502a85306be54ea5995fc60bf709b52ae7b55b76cf4d532ec9738ae37b3643bca24c8ac033827dd6fc1e9c923a851f5a26a9bee1b5968dbbd81ef188321c2f28f3da6e85ec3e3bc9e465da7491eabc113e7e3977e3ab60e97d828934667fdaef1d0aca1b30c682ebeeb66c7782e1701859e777c108aa7c9e4a2f2d5c493cd2562ae4870d558da8e21bdae0c2f0d84a945bd9255d712a19b9accc8dcb69c21f9f1cca56fba43949200aff6daba788e426bb0a4fbc517fa0aec6e4cb2b7c04a1f663b38632255e14fb7ac98e87044b82b939792547e16d8314386634155f1dad87b70f7ff5e5506957fc27399a23471bcc3c25cd80d99ad481a8cb0d805546a7079fb1a44c6a3a7e6afc679c4363d0447094b52f8c5d8529dbe0a65d186338dd019a9d606cdbc8f66315fd93d73e1d13c59054a8f715eafae17eaf5235c2939eccd0bc2f583beaead903b8608cf32f8c45dc2d5cbf90dd588edfadcd70429fb05d6b561795c914480a924477e6aff395caa8db34f361556f6aae52c7875ddf070630515542ca2795e2213c8961ce5fa25bbc07d75bf147a1c4db621dc3e68ac3ec7c522900e8300f13cca0b58391ceb03fdccbde26c6dfd9d2a224f0d2696ea2533dca36558003cdb83851827815956da3dd9a6b016b6343adaf8e058b84c4b07f9a00373ab341d1e2d350a7c60aa82d891ac69a9b16d76dbdde921790e8dcfd4335628643280e75864902ed6cf511fa34f11adbee36d37acc4f9d55e9052d48d259c5c7e4bb15ebee63172cb62f86970040766c5cca547a0d6ddfaa3fc9793aba92a2414c12e55185a218d5e770b61a3ad3553a3c0fe4e36a35d91d0a54b81adc70615ec7a5df83f1eda5b9c479f8c99712c7cde7e21c43127e1d27f21df3af3717339b6775de2b6c884ae5010c7d392eafee320ad957e26e0013c5bc7efd8796352a8cc3992c108629b6d6aeaea29b026ab5c90cab48198c9555d51b036bbdcd49a6e60eed49cac8880f9c73b4da87fc3bb48c3efffda218e766adcbb5e8ec978864a8c18e13465e879051f564cf590b58bf5da964cdfa7eae601c10882a474a5471c23ed460f778bd4b3dbe19cc03b94d851ed7c3c9bd3b6a152e6a7097075ee8774c004d4acff495dd25593487e7814b7e0da8513e2a2455982d8cd4dc0e4e0fbf6b52ac34ac7734a67acd86e44576df5f231ae6e667f951b0982b2d17bdb9eb78a2a4768e4ee0d2d21d80da9828af919feebb4dcfba63974abd1cfd56fa63347334a8afd980590f12f4650f30b83f8cc02ab05170c0a91cda7fa795aa490aebde476ef5c331e526609fb8eb0a4364c491ea1da1f2bbf034f726194d5eff0758814a9221f353acd10c3b840e983566a87d9948635db3781a4f96fa52bce0b84d90f7566595dfc45570c77c2a5743a99f5fc09a0830d722c1a454378028bbd55d82bf45d974e0c61f63e3adde386924153397891dae329a9dae1ea72dbc1f418383da9fdb9181f58ded8e4400de3be4f95379b86390f87f839b69a91ee407818183b9c0e92320fd75fc5e373402662815a95a82291af18a094b3762aa84277bd966a34b295b6db1fc3f1c8e3c284caed4c667d878f15a9e7d27bb22ae226a81755983a9d039bd1e7bc401eda394563ad9a1cffefc2ae6ed38ba51bddf4aeb4ae2cd0c3d96a3f563c1f2c2f05eafe51d60261b5752d82d67bf446bf37006e7b3c622598ffc", 0x1000}], 0x1, &(0x7f0000002400)=[@cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r17, r18, r19}, @cred={0x20, 0x1, 0x2, r20, r21, r22}], 0xc8, 0x80c0}, {&(0x7f0000002500)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002800)=[{&(0x7f0000002580)="2348e6f07ba281f0aa95a4b6008301d5e8fb5d12b6a950d5cab2e365fa45f37c32a8a21b94b287d8a224c1caa905e8f224fd9d47135a1df0081b69d09502cb92e5a1b8003addc4458c98b57953b4dea75fb6887bf3530ab9f50d7a2b8503cd18062fbd15e3be5e0e8930fe5d0cc4f5367fe738e61742a7e74dc096d66eeeee9094e02d2a4177d21851bd16b20abe49c54c8209eaf8feb2a061da2382a7d5bab05fe19fd28158798e7f4e02ae316544a5e1866091", 0xb4}, {&(0x7f0000002640)="758f626c06ebed66286f7c41ffd924b7e39b6f961522093c1d37a3ccb025630c10f5344d4ee2002506926eabc133413fea20cb", 0x33}, {&(0x7f0000002680)="316006dd14ba2f5df5ee370d4eeec0f8da9818f896dc24c5556ea96c612980879fd92b441cc7698be54c9fd4b1172639b943ebf809f8d30e15e084d730dbf80f54c71c962432ab67cc14315cc99f9a314d51124e91af998630e95a1854ca3e97fcdb438340403627f5ff7368f71a2bd2d75dafe01cd4033ff540ad4d4c4854cd5502ca42ed1cf6cf357c3d58747be02a19028bd9744af9d8d933069732ddf6fc8a464169c248ed6eac6b421e3871ddd5644e45e9302b9fd8b49ec5b757ecf2a810036a1465b269cb80b1f14c4f9b9cf315746b34abc223915de3aa017bf2138687be1570735d1819066a319689e8", 0xee}, {&(0x7f0000002780)="630437eea4a4497866e62c1f5ad775716bb3fa93e3c8b5b3285887267f6b5f30b633ee54d064697fc86fecc6a9e4d0bbb53595a2ff38607e989a96e22473229ca7a5d5339dd6", 0x46}], 0x4, &(0x7f0000002c00)=[@cred={0x20, 0x1, 0x2, r23, r24, r25}, @cred={0x20, 0x1, 0x2, r26, r27, r28}, @cred={0x20, 0x1, 0x2, r29, r30, r31}], 0x60, 0x4000000}, {&(0x7f0000002c80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000002ec0)=[{&(0x7f0000002d00)="e408b1a8570d1e62193f25e5130b268977bb5e54f6c93b21000373f9c81c2ce322c282ca33f2f7dbd4b1c491b30badfc72ac1ff2e26d94d3328372f576280999d17b96272a8e3b224aaca861e84cf3536c91da663944316b98516102751853f69e9e9f90ec1fbceead3cf3288a0bb08741d9", 0x72}, {&(0x7f0000002d80)="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", 0xfb}, {&(0x7f0000002e80)="4bfb2f3df45f8a125776cff5e0", 0xd}], 0x3, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r32, r33, r34}], 0x20, 0x50}, {&(0x7f0000003080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000032c0)=[{&(0x7f0000003100)="549810efbce0c748f8bdf296398ee062f2cded462d3ba03059c8533c8966c3de67fd234411bfc0fc8d448e0de7095d63ecb68e5dc2b0c65096f23bb22af330611c4ffd0e6bae64cd6f0c953b41", 0x4d}, {&(0x7f0000003180)="5f29b82a11d853eb60806e78384dabc4904027f876599dd015c726b0f8b81c0b1a912caf83e29b01680227a147df269d1e4021aed4714c4df08218dd9ff921d398099ddf31935e74b0679c10ae5849340d2af95c237bdf3df0ec925e1f11982cb350ff6770a2d8c2ca01efc310eacd89fd9d24fcba617dd461dc67bd881708759aa4d8c156413ef20b12a6231bc56323cc678cd2d393bed59403a31f36c23bba3408abde2a5c750d43d8a4eb88b112386276d556d8b17cbab38e25266fc836e544f237af7fa8ff8336a6fae5bec39990e933a689ea295568f1a86b55eab988", 0xdf}, {&(0x7f0000003280)='d', 0x1}], 0x3, &(0x7f0000003740)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r35, r36, r37}, @rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r38, r39, r40}, @cred={0x20, 0x1, 0x2, r41, r42, r43}, @cred={0x20, 0x1, 0x2, r44, r45, r46}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}], 0x108, 0x4}, {&(0x7f0000003880)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000003c80)=[{&(0x7f0000003900)="f3e72e02a6b1eacff6a9cec45cbde1037bacec2539a100dc3f0a72f1571ffd1d7411b87fb8fb837d45fb7ad83d7895300c3d34938e709c1357da2bea27879eeab6679b54bfbebb04966f36618f5ee63ee304239be93899ad14a28ba79bf2e75c12ee16af2bee23e2adb732ca0956ca323e6b98035ae515473ab6068b5ec437011dca934221132850adf2", 0x8a}, {&(0x7f00000039c0)="fe6dc4370ab48ca2345970ae0e74b423b9cfe886524dd582229802b7ffded5b98253f4e4d6a6b9e240a616ed32d4423c993e48d3d09065a82faba8b2909a81a64aa0dc0e0d118c0993b2086452802f9343d26dfd3f5ce52e6763e483d7d645a2e37d2bbafb4f30bbb17f9c2e55989598007d11c083093f357ae6fa01f4c7441467490eaa047f5ab6f7b151409882908e5daca414667a7622d7c5fc97a08847523487baa68b192d195cd344d486396de34f1eb94cd2a0575ff6fd6fe6eb99017e2b2abe2078a25688c7699a2ef3e443a46803d1c694175cfe5f0eef86c61e465b29170dccda24fbf31d25d36256", 0xed}, {&(0x7f0000003ac0)="af", 0x1}, {&(0x7f0000003b00)="020428ed8d8c9f31640c6e7d072f8decd75322b52278b1b4edf3b8ba0419aca2c3eaa9a9ddd1c3720eb393d71378a06de929a2e876136f6d390f77ad558730ad843fbee1e24e217b4838d026012da218368ba669b4cadf39ccf055615d9aa03437c390561c7e0fb6c8df47c3c99f318a71a6308022b3b45e8b224c035b85a699947e671ea68ed91d8531b165699a01f6619cf8c3e5b61df7b28449bd417d9d032bf381df10d821366fc4c33b5a130dda5c76a1b758852b878f53e8aba04f89e803aec10fd659967ef46ed14fe462497956fbf044fdd47556ec0f14b82eb51ea54e7b490773966043fdb74100856c7e7e", 0xf0}, {&(0x7f0000003c00)="feff3c4dfaf8b7766658478b1f8459dcf6769b6bcedd2ef32e97e05ced259693998aa1e47a5d4e34f61cf1e6f4872b12e071270e21eb4e8317a142fcb0c65ed3e2428be665feb54e85be708a8f839854", 0x50}], 0x5, &(0x7f0000004040)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r47, r48, r49}, @cred={0x20, 0x1, 0x2, r50, r51, r52}, @cred={0x20, 0x1, 0x2, r53, r54, r55}, @rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x18, 0x1, 0x1, [r0, r0]}], 0xb8, 0x80}, {&(0x7f0000004100)=@abs={0x1, 0x0, 0x4e23}, 0x6e, &(0x7f0000004240)=[{&(0x7f0000004180)="3d08035dd5f6cb28cc0a85383369738e7387ec168907d2cdf623", 0x1a}, {&(0x7f00000041c0)}, {&(0x7f0000004200)="f7d56a1d31247c013c5f2325a93240b9c4d7f8c68e469fad2a80e5f829dc27c3fbd4ee823f0aaaed12ed16", 0x2b}], 0x3, &(0x7f0000004540)=[@cred={0x20, 0x1, 0x2, r56, r57, r58}, @cred={0x20, 0x1, 0x2, r59, r60, r61}, @rights={0x18, 0x1, 0x1, [r0]}], 0x58, 0x10}, {&(0x7f00000045c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000004840)=[{&(0x7f0000004640)="975cede5ef529ec5ebee22bfce2ecf3243ba65c6419de26d7cc49595926d449672ff3bd1bd541678331e0fac7a2f9f", 0x2f}, {&(0x7f0000004680)="a4c2b40e305687fdeebcfe2f43f6e638c443c2ef6e7946cba45c2e30f9f24ec7349ee695872efe52c36ea50e1992a1cf0554fe6222a73f5381f367c2c8bdcf9c9325aad85251cf659e049f510f0167910d1ec8ef716cceec846a7c58162048ee87ee67ee66f99e408b16a6884218dafb46bd8ac9a1b2ba05dd5c9ae135adef8364416aebabfa76fbf0c4fac1499261396460", 0x92}, {&(0x7f0000004740)="a597ca83297ec1f35e0c5074df2917fc143f7f61dbe0e52770aa4f53b9472f785799f1bd4a18215b703e2c0965faab68bf27eac0be9175030d21ae9945d0849da97a169c5f340700c71312b93c19e66e8fabe0764dd1afa0f64164a5b449593f25692d8bf46974b0cf7dd8fdf12043128703c2a2a8010b3bf926ae31a9db8186b71d23437755a2276e7fbfb999da574d71c4b3781e09e9c2ff6a2050177c3a65a900a93b87d46abea6bfbff98257fff4d4cec32bc71cbadbed2782d9f401792ea2ba4ca5ec654817cc7d7382d58c139324daa0744bafa4c7a489f780bc19fb4b848548564313ba1a5b554eb3e51591d769c3083c1f02", 0xf6}], 0x3, &(0x7f0000004b00)=[@cred={0x20, 0x1, 0x2, r62, r63, r64}, @rights={0x18, 0x1, 0x1, [r0]}, @cred={0x20, 0x1, 0x2, r65, r66, r67}], 0x58, 0x20000080}, {&(0x7f0000004b80)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000004c00), 0x0, 0x0, 0x0, 0x4000}], 0x9, 0x800) 04:28:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x200, 0x0) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000040)={'bcsh0\x00', {0x2, 0x4e20, @local}}) 04:28:49 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x100, 0x0) r1 = dup2(r0, r0) getsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000000)=0x8, &(0x7f00000000c0)=0x4) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) 04:28:49 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="110f000000000000000016000000ffffff7f"], 0x1}}, 0x0) 04:28:49 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000) 04:28:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0x101000) ioctl$UI_SET_KEYBIT(r1, 0x40045565, 0x1f8) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000100)=ANY=[@ANYBLOB="000000001800000000000000060000000000000001000000080000000700000096a98f1f43a820361613affefc80e1b764a19549006b33e0c676deac651ac1a18e6769041b6350c8486054667e4bab29db1fd20b6338057e85d991feff09866876179d9a501d60dd1f4041a703edffd22c2ed1d1934400000000000000000000"]) openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:49 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x12, 0x10000000006, 0x400000000000004, 0x6}, 0x2c) fsetxattr$trusted_overlay_upper(r0, &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000200)={0x0, 0xfb, 0x114, 0x61fd8b3d7caca939, 0x101, "d84dceca72710a35d9bc65d5936a9fb7", "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"}, 0x114, 0x3) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f0000000000)={r1, &(0x7f0000000080), 0x0}, 0x18) r2 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x10000, 0x3) accept4$tipc(r2, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) 04:28:49 executing program 2: mq_notify(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x3}) 04:28:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x200, 0x0) r3 = gettid() r4 = getpgid(0xffffffffffffffff) r5 = getuid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000140)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0xc) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f00000001c0)={0x0}, &(0x7f0000000200)=0xc) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in=@multicast1, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$netlink(r2, &(0x7f00000004c0)={&(0x7f0000000040)=@proc={0x10, 0x0, 0x25dfdbfd, 0x20000000}, 0xc, &(0x7f0000000100)=[{&(0x7f0000000080)={0x18, 0x22, 0x700, 0x70bd2d, 0x25dfdbfe, "", [@typed={0x8, 0x75, @pid=r3}]}, 0x18}, {&(0x7f0000001080)={0x1018, 0x25, 0x100, 0x70bd27, 0x25dfdbfc, "", [@generic="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", @typed={0x8, 0x48, @ipv4=@multicast1}]}, 0x1018}], 0x2, &(0x7f0000000440)=[@rights={0x20, 0x1, 0x1, [r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r4, r5, r6}, @cred={0x20, 0x1, 0x2, r7, r8, r9}], 0x60, 0x20044000}, 0x81) 04:28:59 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x7000000}, 0x2) 04:28:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x5000000) 04:28:59 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x800) readv(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=""/217, 0x20000259}], 0x1) 04:28:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/107, 0x6b}], 0x5a) 04:28:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000000), 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:28:59 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6d, 0x0, 0x0) 04:28:59 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) 04:28:59 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:28:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) sendto$ax25(r1, &(0x7f0000000100)="19902bed674617d69a5034578151f87a23f4b8cb052d4e497a94ee14f8616bf86f56a43b9fd745f18189eaa1285a9c268c304fc3ee5047fd1e0a99fd0a677a6998a7edda7b254d80d56c59d604cf6f6463b91c407bb9ffda3e7512a8aa501abedfb19dd193609d3052dfed62fa3b8dea45648c9cf1bd1ce80b3fe6713ea56b9b9baaf19acdb6", 0x86, 0x41, 0x0, 0x0) r2 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x34a, 0x1) ioctl$RTC_UIE_ON(r2, 0x7003) 04:28:59 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7000000) 04:28:59 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:00 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) io_setup(0x7, &(0x7f0000000000)=0x0) io_pgetevents(r1, 0xa, 0xa, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={0x5}, 0x8}) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:29:10 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x8000000}, 0x2) 04:29:10 executing program 3: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) 04:29:10 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc000000) 04:29:10 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3, 0x2000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffff9c, 0x8933, &(0x7f00000000c0)={'hsr0\x00', 0x0}) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, r2, 0x3}, 0xffffffffffffff7e) 04:29:10 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6e, 0x0, 0x0) 04:29:10 executing program 3: perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(0xffffffffffffffff, 0xc1105517, &(0x7f0000001000)) r0 = socket(0x1f, 0xa, 0x2000000000000000) recvmmsg(0xffffffffffffff9c, &(0x7f0000000740)=[{{&(0x7f0000000000)=@xdp={0x2c, 0x0, 0x0}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000080)=""/165, 0xa5}, {&(0x7f0000000140)=""/237, 0xed}], 0x2}, 0x8237}, {{&(0x7f0000000280)=@alg, 0x80, &(0x7f0000000680)=[{&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/79, 0x4f}, {&(0x7f00000003c0)=""/227, 0xe3}, {&(0x7f00000004c0)=""/169, 0xa9}, {&(0x7f0000000580)=""/87, 0x57}, {&(0x7f0000000600)=""/124, 0x7c}], 0x6, &(0x7f0000000700)=""/43, 0x2b}, 0x200}], 0x2, 0x2000, &(0x7f00000007c0)={0x0, 0x989680}) ioctl$sock_inet6_tcp_SIOCINQ(r0, 0x541b, &(0x7f00000009c0)) socket$rds(0x15, 0x5, 0x0) recvfrom$x25(r0, &(0x7f0000000840)=""/230, 0xe6, 0x40002142, 0x0, 0x0) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f0000000800)={r1, 0xa8, 0x6, 0x68d76e97, 0x80000001, 0x2, 0xbe8}) r2 = fcntl$getown(r0, 0x9) ptrace$peek(0x3, r2, &(0x7f0000000940)) syz_open_dev$evdev(&(0x7f0000000980)='/dev/input/event#\x00', 0x6, 0x0) 04:29:10 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:10 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x40000, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:29:10 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xf000000) 04:29:10 executing program 1: r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) clock_gettime(0x6, &(0x7f0000000140)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r0, 0xc058565d, &(0x7f00000000c0)={0x5, 0x7, 0x4, 0x0, {r1, r2/1000+10000}, {0x5, 0x2, 0xfa23, 0x1, 0x7fffffff, 0x3, "1426054f"}, 0x6, 0x3, @userptr, 0x4}) readv(0xffffffffffffffff, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:29:10 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:20 executing program 2: write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:20 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x10000000}, 0x2) 04:29:20 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x80000001, 0xc0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x20, 0xfbfe}, &(0x7f0000000080)=0x8) ioctl$SG_NEXT_CMD_LEN(r0, 0x2283, &(0x7f0000000140)=0x96) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000200)=@int=0x6, 0x18a) r1 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) sendfile(r1, r1, &(0x7f0000000100), 0x3) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0xfffffffffffffffd, 0x0, 0x100000000000000, 0x0, 0x0, 0x8ce, 0x0, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000001000)) 04:29:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x11000000) 04:29:20 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) ioctl$FS_IOC_SET_ENCRYPTION_POLICY(r0, 0x800c6613, &(0x7f00000000c0)={0x0, @aes128, 0x1, "a043b451fef1a9b1"}) 04:29:20 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x6f, 0x0, 0x0) 04:29:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) [ 955.413747] snd_dummy snd_dummy.0: control 112:253:0:Î:0 is already present 04:29:20 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:29:20 executing program 3: syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0xa9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c, 0x0, 0x800000000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 04:29:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:20 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:29:20 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:20 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/mISDNtimer\x00', 0x101000, 0x0) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vfio/vfio\x00', 0x2000, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0x2, &(0x7f0000000180)=0x7, 0x4) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000140)=0x2, 0x8) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f00000000c0), 0x4) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) 04:29:30 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1c0f0000}, 0x2) 04:29:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x18000000) 04:29:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x3) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:29:30 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x80003, 0x0) readv(r0, &(0x7f0000000000), 0x29a) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x400, 0x0) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x6, 0x20, 0x20000, 0x9}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0x345e1dd0, 0x4}, &(0x7f0000000140)=0xc) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) 04:29:30 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x70, 0x0, 0x0) 04:29:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = syz_open_dev$mice(&(0x7f0000000100)='/dev/input/mice\x00', 0x0, 0x2000) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000140)={0x10000, 0xf000, 0xfffffffffffffffb, 0x9, 0x6}) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000180)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{}]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:29:30 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x129000, 0x0) ioctl$EVIOCSCLOCKID(r1, 0x400445a0, &(0x7f00000000c0)=0x6) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000100)={0x0, 0xffffffffffffffc1, 0x5e, 0x0, 0x0, 0x4}) [ 965.754531] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:29:30 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x20000000) 04:29:30 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x0) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x2, 0x1000000000000) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x4, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000000040)) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm_plock\x00', 0x1, 0x0) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x1) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xe553209, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={'rose', 0x0}, 0x6, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) 04:29:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.origin\x00', &(0x7f0000000080)='y\x00', 0x2, 0x2) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:29:40 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x1f000000}, 0x2) 04:29:40 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:40 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x29000000) 04:29:40 executing program 1: r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000140)='/dev/snd/pcmC#D#p\x00', 0x4, 0x200000) bind$x25(r1, &(0x7f0000000180)={0x9, @null=' \x00'}, 0x12) readv(r0, &(0x7f0000002340)=[{&(0x7f0000000040)=""/107, 0x3}], 0x1) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80000, 0x0) ioctl$KVM_GET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)={0x1, 0x0, [{}]}) ioctl$KVM_GET_VCPU_EVENTS(r2, 0x8040ae9f, &(0x7f0000000100)) 04:29:40 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x71, 0x0, 0x0) 04:29:40 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x4, 0x8000) getsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000040)=0x7fff, &(0x7f0000000080)=0x4) mprotect(&(0x7f0000508000/0x4000)=nil, 0x4000, 0x5) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:29:40 executing program 1: symlink(&(0x7f00000001c0)='./file2\x00', &(0x7f00000002c0)='./file2\x00') clone(0x200, 0x0, 0x0, 0x0, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000a00)='./file0\x00', 0x0, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x0, 0x0) read(r0, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000340)) r1 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r2 = dup2(r0, r1) execve(&(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x0, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff2, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f0000000400)='./file2\x00', 0x0, 0x0) ioctl$sock_inet_SIOCGIFADDR(r2, 0x8915, 0x0) 04:29:41 executing program 2: openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(0xffffffffffffffff, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x2}, 0x2) 04:29:41 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x3f000000) 04:29:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) getresgid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000003c0)) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vcs\x00', 0x200000, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/checkreqprot\x00', 0xfa002013329edc1e, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000140)=0xc) capset(&(0x7f0000000180)={0x20080522, r3}, &(0x7f00000001c0)={0x8001, 0x7, 0x5, 0x3, 0x7, 0x1a}) r4 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x400, 0x0) mmap$xdp(&(0x7f0000518000/0x4000)=nil, 0x4000, 0x2000000, 0xd011, r4, 0x100000000) ioctl$KVM_ASSIGN_DEV_IRQ(r1, 0x4040ae70, &(0x7f0000000380)={0x8, 0xb525, 0x8, 0x400}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffffff, 0xc00c642e, &(0x7f0000000200)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_FREE_BUFS(r5, 0x4010641a, &(0x7f0000000280)={0x6, &(0x7f0000000240)=[0x100000000, 0x8, 0x3c24, 0xf450, 0x7, 0x100000000]}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) getpriority(0x2, r3) 04:29:41 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) [ 976.312976] snd_dummy snd_dummy.0: control 112:0:0:Î:0 is already present 04:29:51 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x20000000}, 0x2) 04:29:51 executing program 1: openat$selinux_member(0xffffffffffffff9c, &(0x7f00000005c0)='/selinux/member\x00', 0x2, 0x0) r0 = syz_open_procfs(0x0, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r0, 0x40345410, &(0x7f0000000000)={{0x0, 0x0, 0xd, 0x0, 0x1800000000000000}}) unshare(0x4020500) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f00000000c0)) r2 = open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f00000004c0), 0x2}, 0x0, 0x0, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = inotify_init() r4 = open(&(0x7f0000000040)='./file0\x00', 0x141042, 0x0) write$binfmt_elf64(r2, &(0x7f0000000280)=ANY=[], 0x529) dup2(r4, r3) sendfile(0xffffffffffffffff, r4, 0x0, 0xa198) socketpair$unix(0x1, 0x1, 0x0, 0x0) 04:29:51 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) 04:29:51 executing program 3: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x200000, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x80400, 0x0) 04:29:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x40000000) 04:29:51 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x72, 0x0, 0x0) 04:29:51 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, 0x0, 0x0) 04:29:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x1, 0xfffffffffffffffe) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) [ 986.254532] audit: type=1804 audit(1552019391.139:81): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir425493957/syzkaller.BaWk1A/516/file0" dev="sda1" ino=16818 res=1 04:29:51 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x60182300) 04:29:51 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) [ 986.358624] audit: type=1804 audit(1552019391.149:82): pid=13960 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir425493957/syzkaller.BaWk1A/516/file0" dev="sda1" ino=16818 res=1 04:29:51 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cipher_null\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x400000000000005, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) write$binfmt_elf64(r1, &(0x7f0000000b00)=ANY=[@ANYBLOB="7f"], 0x1) recvmmsg(r1, &(0x7f0000008200)=[{{0x0, 0x0, &(0x7f0000003280)=[{&(0x7f0000003000)=""/46, 0x2e}], 0x1}}, {{0x0, 0x0, &(0x7f0000004e00)=[{&(0x7f0000004b40)=""/126, 0x7e}], 0x1}}], 0x2, 0x0, 0x0) 04:29:51 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x9, 0x420001) ioctl$SNDRV_CTL_IOCTL_POWER_STATE(r0, 0x800455d1, &(0x7f0000000100)) syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0, 0x2}, 0x1000000000c}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000040)={0x272, 0xdc3}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0xc1105517, &(0x7f0000000140)) 04:30:01 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3e000000}, 0x2) 04:30:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) mprotect(&(0x7f0000586000/0x1000)=nil, 0x1000, 0x7) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0xc1105517, &(0x7f0000001000)) 04:30:01 executing program 1: r0 = syz_open_dev$binder(&(0x7f0000000440)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000480)={0x4c, 0x0, &(0x7f0000000340)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100000000}}], 0x0, 0x0, 0x0}) 04:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffff) 04:30:01 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x73, 0x0, 0x0) 04:30:01 executing program 1: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_read_part_table(0x0, 0x1, &(0x7f0000000480)=[{&(0x7f0000010000)="000068000005000000000000000000008128b14700000000d59863d2000000000200422020cc00000000ff0700000000000000000000000000000000000000000000000000000000000000000000000000000000000000008a6e94c0000055aa", 0x60, 0x1a0}]) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) keyctl$restrict_keyring(0x1d, 0x0, 0x0, 0x0) [ 996.395696] binder: 14104:14105 transaction failed 29189/-22, size 0-0 line 2994 [ 996.416037] binder: 14104:14105 transaction failed 29189/-22, size 0-0 line 2994 [ 996.424865] binder: undelivered TRANSACTION_ERROR: 29189 [ 996.431652] binder: undelivered TRANSACTION_ERROR: 29189 04:30:01 executing program 3: syz_mount_image$vfat(&(0x7f0000000540)='vfat\x00', &(0x7f00000002c0)='./file0\x00', 0x800000000e004, 0x1, &(0x7f0000000140)=[{&(0x7f0000000180)="eb3c906d6b66732e666174000204010002000270fff8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f0000000200)='./file0\x00', 0x0, 0x0) fchdir(r0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) r1 = open(&(0x7f00000000c0)='./file0\x00', 0x20400040c2, 0x0) r2 = open$dir(&(0x7f0000000380)='./file0\x00', 0x0, 0x0) write(r1, &(0x7f0000000600)="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", 0x1fe) sendfile(r1, r2, 0x0, 0x10000) 04:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe8030000) [ 996.612755] audit: type=1800 audit(1552019401.499:83): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16819 res=0 [ 996.638834] ldm_validate_privheads(): Disk read failed. [ 996.666542] loop1: p1 p4 [ 996.683269] loop1: partition table partially beyond EOD, truncated 04:30:01 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) [ 996.707714] audit: type=1804 audit(1552019401.529:84): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir817932774/syzkaller.xUtla3/653/file0/file0" dev="sda1" ino=16819 res=1 [ 996.735812] audit: type=1804 audit(1552019401.559:85): pid=14121 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir817932774/syzkaller.xUtla3/653/file0/file0" dev="sda1" ino=16819 res=1 [ 996.775459] audit: type=1804 audit(1552019401.569:86): pid=14188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir817932774/syzkaller.xUtla3/653/file0/file0" dev="sda1" ino=16819 res=1 [ 996.790360] loop1: p1 size 2047 extends beyond EOD, truncated [ 996.841643] loop1: p4 start 1854537728 is beyond EOD, truncated [ 996.989002] __loop_clr_fd: partition scan of loop1 failed (rc=-22) 04:30:01 executing program 1: r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) write$eventfd(r0, &(0x7f0000000080)=0x1d, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) syz_genetlink_get_family_id$ipvs(0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) 04:30:01 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:30:01 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffff8000) [ 997.080784] print_req_error: 1 callbacks suppressed [ 997.080796] print_req_error: I/O error, dev loop1, sector 0 flags 80700 [ 997.103240] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.109885] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.117855] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.124379] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.132538] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.139248] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.147664] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.154209] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.162355] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.168953] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.179344] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.185898] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.195151] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.201652] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.209721] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.216427] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.224021] print_req_error: I/O error, dev loop1, sector 0 flags 0 [ 997.230605] Buffer I/O error on dev loop1p1, logical block 0, async page read [ 997.255173] Buffer I/O error on dev loop1p1, logical block 0, async page read 04:30:11 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x74, 0x0, 0x0) 04:30:11 executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002200000007000000000000009500000000000000d78e7607b06ff062384ef961aa9bee4e6e12479a3fc4c05c74f3c30a01a5b7fa735525802d44d51257ccbf312c2d56288b43aee8eacd824c59284eda58f9fed07e3f719b0ace53edfc78d48462df14b7626249d7a57575f01303be25add4db54a3bf"], 0x0, 0x2, 0x1000, &(0x7f0000014000)=""/4096}, 0x48) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000b80)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x0, 0x3a, 0x0, &(0x7f0000000280)="e460a69070a008000000f79286dd6a00000000072feb3014b36346cd010400000000000060ffad001800e8d5000000010006001400000500242f", 0x0, 0x401}, 0x28) 04:30:11 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x3f000000}, 0x2) 04:30:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffe0) 04:30:11 executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = memfd_create(&(0x7f0000000880)='#em1#+\x00', 0x0) write$eventfd(r0, &(0x7f0000000080)=0x1d, 0x8) write(r0, &(0x7f0000000040)="0600", 0x2) sendfile(r0, r0, &(0x7f00000000c0), 0xfeff) mmap(&(0x7f0000000000/0x7000)=nil, 0x7000, 0x80000000004, 0x11, r0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f000001a000)={0xffffffffffffffff, 0xffffffffffffffff}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f000002eff0)={0x444, &(0x7f0000000000)=[{}]}, 0x10) getpid() 04:30:11 executing program 1: openat$selinux_member(0xffffffffffffff9c, 0x0, 0x2, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xee6a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) unshare(0x40000000) getpid() open$dir(&(0x7f0000000400)='./file0\x00', 0x80004, 0x0) inotify_init() open(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) 04:30:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x8000000000) [ 1006.834563] IPVS: ftp: loaded support on port[0] = 21 04:30:11 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x7fb83e86c700) 04:30:11 executing program 1: request_key(&(0x7f0000000000)='keyring\x00', 0x0, 0x0, 0xfffffffffffffffe) keyctl$invalidate(0x15, 0x0) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x3) pipe(&(0x7f0000000240)) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x4000000, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2000, 0x0, &(0x7f0000c87000/0x2000)=nil) creat(&(0x7f00000001c0)='./bus\x00', 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x4ed4, &(0x7f0000000100)=0x0) io_submit(r0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, &(0x7f0000000380)={'bridge_slave_1\x00', {0x2, 0x0, @local}}) utimes(0x0, 0x0) 04:30:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x80ffff00000000) 04:30:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, &(0x7f0000000140)="420fb507b805000000b98de92d630f01c1f2430f3566b869008ec0f0814b00ec480000470f017a00f3f7e4470f017cc0423e26460f21f6410f01df", 0x3b}], 0x1, 0x0, 0x0, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 04:30:12 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x75, 0x0, 0x0) 04:30:12 executing program 2: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT, 0x2) 04:30:12 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xc7863eb87f0000) 04:30:21 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x40000000}, 0x2) 04:30:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r1, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) 04:30:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xec0f0000000000) 04:30:21 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x76, 0x0, 0x0) 04:30:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f0000000080)={0x0, 0x4000}) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000000)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 1016.885721] dlm: Unknown command passed to DLM device : 0 [ 1016.885721] 04:30:21 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100000000000000) 04:30:21 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r1, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) [ 1017.125533] dlm: Unknown command passed to DLM device : 0 [ 1017.125533] 04:30:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r1, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) 04:30:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x3e, 0x0) write$nbd(r1, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) [ 1017.287288] dlm: Unknown command passed to DLM device : 0 [ 1017.287288] 04:30:22 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) [ 1017.331237] dlm: Unknown command passed to DLM device : 0 [ 1017.331237] 04:30:23 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x77, 0x0, 0x0) 04:30:23 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x100000482, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 04:30:31 executing program 0: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000001780)='/dev/vhci\x00', 0x8000000246) write$vhci(r0, &(0x7f0000000080)=@HCI_VENDOR_PKT={0xff, 0x48000000}, 0x2) 04:30:31 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text32={0x20, &(0x7f0000000340)="b9800000c00f3235000800000f30660f388172de3e0f0626660f6a91f5fffffff30f078fc9a893be0a00000036f080a703000000dc0f01cfb9b0000040b800380000ba000000000f30150e000000", 0x4e}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x100008000000000) 04:30:31 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000040)="0adc1f123c12a41d88b070") write$nbd(0xffffffffffffffff, &(0x7f00000000c0)={0x6000000, 0x0, 0x0, 0x0, 0x0, "a3ef41749fa55a2fdbedbdfc867b0aa45abd977391ea888aad945b88278c02ede7d9d4d7c0600000cc021c6493c5d465b24f2510e32f7a0eb6bb02f6b78b1ea580f6b0185947306a84c6c5e7be78ab9406ffea21ad85000094"}, 0x69) 04:30:31 executing program 2: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2098, 0x0, &(0x7f0000000180)='EP\xd4\x00\x1f\x91\xeb/W\xb72$C0%\x03\x9c0\x96\xb2\fkC\x93H\xbfh\x9c\b`\x857\xd6\">c\xad\xc0bO\xba\xe2\xe1\t5\x9d\xcei\"2L\xcc\x13\x16\vh\xca\xe6C\x06\x97%\x9d\xd5-\x1fs\xe1j\xdc5\x92\xd0)%\xdf\xfa\xe8^\x9c\xd29\x8clg\xc8\x7f\xb5\xb1&\x02\xf1E\xb4\x84\xbeE\x91)f\xe8\xb7\xe2\xf6`i\xc5m\xd7l\x1d\xc1\x12\x01<:kM\xe9\x99\xcd\xcd\xc8\x85Z\xee47\xdc\xc8u\x80\xcf\xbeTo\xbb\xfb\xc0\xebV\xd8\xbb\xbe\xa2\x90J|s\xc2'}, 0x48) r1 = socket$kcm(0xa, 0x5, 0x0) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000100)=@in={0xa, 0x0, @local={0xac, 0x2c0}}, 0xffd6, &(0x7f0000000640), 0x98, &(0x7f0000000180)=[{0x20}], 0x20}, 0xfc) 04:30:31 executing program 3: openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x100000482, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000)='/dev/nullb0\x00', 0x802, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f0000000080)={0x0, 0x4004400}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) 04:30:31 executing program 5: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_elf64(r0, &(0x7f0000000040)=ANY=[], 0xfffffe4b) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmmsg(r1, &(0x7f0000002bc0)=[{{0x0, 0xffffffffffffff74, &(0x7f0000002b00), 0x0, &(0x7f0000000080)=""/62, 0x3e}}], 0x78, 0x0, 0x0) [ 1027.200393] ================================================================== [ 1027.207945] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 1027.214966] Read of size 8 at addr ffff888094949398 by task syz-executor.0/14895 [ 1027.222522] [ 1027.224163] CPU: 1 PID: 14895 Comm: syz-executor.0 Not tainted 5.0.0+ #11 [ 1027.231118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.240476] Call Trace: [ 1027.243080] dump_stack+0x172/0x1f0 [ 1027.246729] ? lockdep_register_key+0x3b9/0x490 [ 1027.251417] print_address_description.cold+0x7c/0x20d [ 1027.256697] ? lockdep_register_key+0x3b9/0x490 [ 1027.261379] ? lockdep_register_key+0x3b9/0x490 [ 1027.266057] kasan_report.cold+0x1b/0x40 [ 1027.270120] ? lockdep_register_key+0x3b9/0x490 [ 1027.274803] __asan_report_load8_noabort+0x14/0x20 [ 1027.279749] lockdep_register_key+0x3b9/0x490 [ 1027.284254] alloc_workqueue+0x427/0xe70 [ 1027.288325] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1027.293373] ? __init_waitqueue_head+0x36/0x90 [ 1027.297968] hci_register_dev+0x1b8/0x860 [ 1027.302121] ? hci_init_sysfs+0x7c/0xa0 [ 1027.306101] __vhci_create_device+0x2d0/0x5a0 [ 1027.310607] vhci_write+0x2d0/0x470 [ 1027.314247] __vfs_write+0x613/0x8e0 [ 1027.317969] ? kernel_read+0x120/0x120 [ 1027.321859] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1027.327408] ? rw_verify_area+0x118/0x360 [ 1027.331560] vfs_write+0x20c/0x580 [ 1027.335111] ksys_write+0xea/0x1f0 [ 1027.338663] ? __ia32_sys_read+0xb0/0xb0 [ 1027.342739] ? do_syscall_64+0x26/0x610 [ 1027.346735] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.352100] ? do_syscall_64+0x26/0x610 [ 1027.356083] __x64_sys_write+0x73/0xb0 [ 1027.359975] do_syscall_64+0x103/0x610 [ 1027.363874] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.369067] RIP: 0033:0x457f29 [ 1027.372260] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.391164] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1027.398872] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1027.406140] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 1027.413408] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1027.420679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 1027.427980] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 00000000ffffffff [ 1027.435250] [ 1027.436877] Allocated by task 3869: [ 1027.440511] save_stack+0x45/0xd0 [ 1027.443968] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1027.448932] kasan_kmalloc+0x9/0x10 [ 1027.452559] kmem_cache_alloc_trace+0x151/0x760 [ 1027.457228] kernfs_fop_open+0x2ac/0xd90 [ 1027.461291] do_dentry_open+0x488/0x1160 [ 1027.465352] vfs_open+0xa0/0xd0 [ 1027.468630] path_openat+0x10e9/0x46e0 [ 1027.472518] do_filp_open+0x1a1/0x280 [ 1027.476318] do_sys_open+0x3fe/0x5d0 [ 1027.480034] __x64_sys_open+0x7e/0xc0 [ 1027.483844] do_syscall_64+0x103/0x610 [ 1027.487744] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.492923] [ 1027.494546] Freed by task 3869: [ 1027.497835] save_stack+0x45/0xd0 [ 1027.501313] __kasan_slab_free+0x102/0x150 [ 1027.505551] kasan_slab_free+0xe/0x10 [ 1027.509355] kfree+0xcf/0x230 [ 1027.512471] kernfs_fop_release+0x129/0x1a0 [ 1027.516804] __fput+0x2df/0x8d0 [ 1027.520088] ____fput+0x16/0x20 [ 1027.523368] task_work_run+0x14a/0x1c0 [ 1027.527257] exit_to_usermode_loop+0x273/0x2c0 [ 1027.531840] do_syscall_64+0x52d/0x610 [ 1027.535737] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.540924] [ 1027.542564] The buggy address belongs to the object at ffff888094949280 [ 1027.542564] which belongs to the cache kmalloc-512 of size 512 [ 1027.555220] The buggy address is located 280 bytes inside of [ 1027.555220] 512-byte region [ffff888094949280, ffff888094949480) [ 1027.567087] The buggy address belongs to the page: [ 1027.572017] page:ffffea0002525240 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0x0 [ 1027.580161] flags: 0x1fffc0000000200(slab) [ 1027.584399] raw: 01fffc0000000200 ffffea00016ed9c8 ffffea000238ff48 ffff88812c3f0940 [ 1027.592285] raw: 0000000000000000 ffff888094949000 0000000100000006 0000000000000000 [ 1027.600172] page dumped because: kasan: bad access detected [ 1027.605872] [ 1027.607503] Memory state around the buggy address: [ 1027.612429] ffff888094949280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.619805] ffff888094949300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.627198] >ffff888094949380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.634571] ^ [ 1027.638727] ffff888094949400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 1027.646089] ffff888094949480: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 1027.653438] ================================================================== [ 1027.660814] Disabling lock debugging due to kernel taint [ 1027.666282] Kernel panic - not syncing: panic_on_warn set ... [ 1027.672193] CPU: 1 PID: 14895 Comm: syz-executor.0 Tainted: G B 5.0.0+ #11 [ 1027.680505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1027.689856] Call Trace: [ 1027.692450] dump_stack+0x172/0x1f0 [ 1027.696092] panic+0x2cb/0x65c [ 1027.699289] ? __warn_printk+0xf3/0xf3 [ 1027.703183] ? lock_downgrade+0x880/0x880 [ 1027.707334] ? lockdep_register_key+0x3b9/0x490 [ 1027.712008] ? trace_hardirqs_off+0x62/0x220 [ 1027.716420] ? trace_hardirqs_off+0x59/0x220 [ 1027.720830] ? lockdep_register_key+0x3b9/0x490 [ 1027.725520] end_report+0x47/0x4f [ 1027.728987] ? lockdep_register_key+0x3b9/0x490 [ 1027.733660] kasan_report.cold+0xe/0x40 [ 1027.737625] ? lockdep_register_key+0x3b9/0x490 [ 1027.742288] __asan_report_load8_noabort+0x14/0x20 [ 1027.747210] lockdep_register_key+0x3b9/0x490 [ 1027.751701] alloc_workqueue+0x427/0xe70 [ 1027.755761] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 1027.760764] ? __init_waitqueue_head+0x36/0x90 [ 1027.765358] hci_register_dev+0x1b8/0x860 [ 1027.769532] ? hci_init_sysfs+0x7c/0xa0 [ 1027.773499] __vhci_create_device+0x2d0/0x5a0 [ 1027.778004] vhci_write+0x2d0/0x470 [ 1027.781636] __vfs_write+0x613/0x8e0 [ 1027.785348] ? kernel_read+0x120/0x120 [ 1027.789237] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1027.794785] ? rw_verify_area+0x118/0x360 [ 1027.798947] vfs_write+0x20c/0x580 [ 1027.802476] ksys_write+0xea/0x1f0 [ 1027.806016] ? __ia32_sys_read+0xb0/0xb0 [ 1027.810081] ? do_syscall_64+0x26/0x610 [ 1027.814152] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.819515] ? do_syscall_64+0x26/0x610 [ 1027.823489] __x64_sys_write+0x73/0xb0 [ 1027.827394] do_syscall_64+0x103/0x610 [ 1027.831278] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1027.836457] RIP: 0033:0x457f29 [ 1027.839659] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1027.858544] RSP: 002b:00007fc05e37dc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1027.866242] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 0000000000457f29 [ 1027.873504] RDX: 0000000000000002 RSI: 0000000020000080 RDI: 0000000000000004 [ 1027.880932] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1027.888215] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fc05e37e6d4 [ 1027.895482] R13: 00000000004c759c R14: 00000000004dd1e8 R15: 00000000ffffffff [ 1027.903440] Kernel Offset: disabled [ 1027.907062] Rebooting in 86400 seconds..