&(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7400]}) 13:28:57 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7a00]}) 13:28:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1000000000000000) 13:28:57 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x1000000]}) 13:28:58 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x2000000]}) 13:28:58 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1100000000000000) 13:28:58 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x1000000]}) [ 2437.141859][T20238] Bluetooth: hci0: command 0x1003 tx timeout [ 2437.148218][ T3551] Bluetooth: hci0: sending frame failed (-49) [ 2439.221880][ T2098] Bluetooth: hci0: command 0x1001 tx timeout [ 2439.228118][ T3551] Bluetooth: hci0: sending frame failed (-49) [ 2441.301870][T20238] Bluetooth: hci0: command 0x1009 tx timeout 13:29:08 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r2 = syz_open_dev$sndpcmc(&(0x7f0000000140)='/dev/snd/pcmC#D#c\x00', 0x1, 0x40) ioctl$VIDIOC_G_MODULATOR(r2, 0xc0445636, &(0x7f0000000180)={0x0, "8bbdc5fea7500c7ec70cbdff01c3f8ee60e38f49f848d95d3819dbf252ebbf3d", 0x10, 0x4, 0x400, 0x0, 0x4}) ioctl$IMCTRLREQ(r2, 0x80044945, &(0x7f0000000200)={0x80, 0x5, 0x4, 0xffffffff00000000}) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) syz_open_dev$video(&(0x7f0000000240)='/dev/video#\x00', 0xfffffffffffffffa, 0x420000) socket$unix(0x1, 0xce3d7ef5ddd3ddd8, 0x0) ioctl$GIO_FONTX(r1, 0x4b6b, &(0x7f00000000c0)=""/101) ioctl$TCSETAF(r0, 0x5408, &(0x7f0000000280)={0x7, 0x9, 0x8, 0xfffffffffffffff7, 0xf, 0x0, 0x4, 0x20, 0x3, 0x1db}) 13:29:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x3000000]}) 13:29:08 executing program 1: openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x0, 0x0) 13:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1200000000000000) 13:29:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x2000000]}) 13:29:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x7, &(0x7f0000000040)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) set_thread_area(&(0x7f00000000c0)={0x8, 0xffffffffffffffff, 0x3000, 0x4a7c, 0x3, 0x80000001, 0x7, 0x1c2, 0x81, 0x3}) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4000000]}) 13:29:08 executing program 1: syz_emit_ethernet(0x66, &(0x7f0000000100)={@link_local, @link_local, [], {@ipv6={0x86dd, {0x0, 0x6, "b40900", 0x30, 0x0, 0x0, @ipv4={[0x3580], [], @multicast2}, @mcast2, {[], @icmpv6=@time_exceed={0xffffffe0, 0x0, 0x0, 0x0, [0x9, 0x4], {0x0, 0x6, "b680fa", 0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}, @ipv4={[], [], @remote={0xac, 0x14, 0xffffffffffffffff}}}}}}}}}, 0x0) 13:29:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x3000000]}) 13:29:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x5000000]}) 13:29:08 executing program 1: r0 = syz_open_dev$sndpcmc(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x0, 0x0, 0x4}, 0x2c) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000), 0x0) close(r1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(0xffffffffffffffff, 0x6612) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000000)={'gre0\x00', &(0x7f0000000080)=@ethtool_dump={0x3f}}) 13:29:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1300000000000000) [ 2447.381867][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2447.387994][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2449.461830][T21833] Bluetooth: hci0: command 0x1001 tx timeout [ 2449.467951][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2451.541816][ T2098] Bluetooth: hci0: command 0x1009 tx timeout 13:29:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) r2 = open(&(0x7f0000000140)='./file0\x00', 0x80, 0xe0) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) r3 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x81, 0x200) write$FUSE_GETXATTR(r3, &(0x7f0000000100)={0x18, 0x0, 0x7, {0x10001}}, 0x18) 13:29:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4000000]}) 13:29:18 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15cdf0311cfc093a52a7d86bd1", 0x10) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000240)="d0588c6d81e702819afb26acf3f03107f2", 0x11}], 0x1}, 0x0) io_setup(0x80000007ff, &(0x7f00000001c0)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}]) 13:29:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6000000]}) 13:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1400000000000000) 13:29:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$vnet(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vhost-net\x00', 0x2, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x5, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$IMADDTIMER(r1, 0x80044940, &(0x7f00000000c0)=0xf4240) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x5000000]}) 13:29:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7000000]}) 13:29:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCNXCL(r0, 0x540d) 13:29:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1500000000000000) 13:29:18 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$kcm(0x11, 0x2, 0x300) r2 = socket$kcm(0x2, 0x5, 0x0) sendmsg$kcm(r2, &(0x7f0000000740)={&(0x7f0000000040)=@in={0x2, 0x0, @dev}, 0x80, &(0x7f0000000580)=[{0x0}], 0x1}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140)='/dev/net/tun\x00', 0x0, 0x0) recvmsg(r1, &(0x7f000000c240)={&(0x7f000000b0c0)=@xdp={0x2c, 0x0, 0x0}, 0x196, 0x0}, 0x0) ioctl$TUNSETIFINDEX(r3, 0x400454da, &(0x7f00000003c0)=r4) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000100)={'nr\x00\x00\x00\x00\x00\x00N\x97\x81\x00\x00\x00\x02\x00', 0x213}) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'irlan0\x00', 0x4001}) 13:29:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x48000000]}) [ 2457.621821][T21833] Bluetooth: hci0: command 0x1003 tx timeout [ 2457.628138][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2459.701864][ T491] Bluetooth: hci0: command 0x1001 tx timeout [ 2459.707985][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2461.781836][T21833] Bluetooth: hci0: command 0x1009 tx timeout 13:29:28 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x121002, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r2, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0xdc, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9f8d}, @IPVS_CMD_ATTR_DAEMON={0x14, 0x3, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x6}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}]}, @IPVS_CMD_ATTR_DAEMON={0x34, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_to_hsr\x00'}]}, @IPVS_CMD_ATTR_DEST={0x5c, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast1}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x4b3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4f66df06}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@initdev={0xfe, 0x88, [], 0x0, 0x0}}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_DEST={0x14, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4}, 0x80) 13:29:28 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6000000]}) 13:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1600000000000000) 13:29:28 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4c000000]}) 13:29:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x8040, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x301080, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000100)={r0, r2}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:28 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1700000000000000) 13:29:28 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x68000000]}) 13:29:28 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7000000]}) 13:29:28 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x48000000]}) 13:29:28 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1800000000000000) 13:29:28 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x80, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000100)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000240)={r2, 0x4}, &(0x7f0000000280)=0x8) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r3, 0x6, 0x1d, &(0x7f0000000080)={0x8, 0xffffffffffff46cc, 0xff, 0x4, 0x88}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 2467.861873][ T491] Bluetooth: hci0: command 0x1003 tx timeout [ 2467.868158][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2469.941828][ T491] Bluetooth: hci0: command 0x1001 tx timeout [ 2469.948090][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2472.021997][ T491] Bluetooth: hci0: command 0x1009 tx timeout 13:29:38 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4}) syz_mount_image$ceph(&(0x7f00000008c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0x1, 0x4, &(0x7f0000000940)=[{&(0x7f0000000140)="1074bc722ece4e19c3b9e4462aca43eb0ca94fae0045c1a26eec12785d003a650e16f56c85082412469081083bd3ccda6c177c1ddce5e886f89550b27f05f366887b7b1bce4b9f8f29f2d57cfac30a90fb7ffb966ebe1deac8c16bfe0c2d39", 0x5f, 0xffffffff}, {&(0x7f00000009c0)="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", 0x188, 0x5}, {&(0x7f0000000800)="b4b5b02457811d2b1f4eec5fec53851f5b0c59176c0f997d7c0e1dd8392050cb9f61cdb6885452aa89f37581eb75c2c4908c7e23b1fb890cc9f10cb151b3e8dd0bc2aa640efc6a47df96fc088c9d0756b62af231b56feda64bbb375fd6ecb0ef33b6ba7aa6c276263aa9f5eb9b68924d1874424f96eb87c10b49bf57820b843e936bd501012a67e7ca045dbd630878efdc34542b38baf7f9450d9b59f4055f31b5a07d1e66c11d10d0ce", 0xaa, 0x8}, {&(0x7f00000002c0)="938863a170ba7087ffc0", 0xa, 0x7}], 0x840000, &(0x7f0000000900)='/dev/ptmx\x00') r1 = syz_open_pts(r0, 0x0) ioctl$KDSETMODE(r0, 0x4b3a, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) flock(r0, 0x4) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000700)='/proc/sys/net/ipv4/vs/sloppy_tcp\x00', 0x2, 0x0) getsockname$netrom(r2, &(0x7f0000000740)={{0x3, @null}, [@netrom, @remote, @netrom, @netrom, @default, @netrom, @default, @bcast]}, &(0x7f00000007c0)=0x48) r3 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, &(0x7f0000000640)={'filter\x00', 0x0, 0x3, 0x11, [], 0x6, &(0x7f0000000580)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000600)=""/17}, &(0x7f00000006c0)=0x78) 13:29:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6c000000]}) 13:29:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1900000000000000) 13:29:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4c000000]}) 13:29:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0xfc, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1a00000000000000) 13:29:38 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x68000000]}) 13:29:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x74000000]}) 13:29:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1b00000000000000) 13:29:39 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2478.101979][T21833] Bluetooth: hci0: command 0x1003 tx timeout [ 2478.108249][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2480.181822][ T491] Bluetooth: hci0: command 0x1001 tx timeout [ 2480.187928][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2482.262009][T21833] Bluetooth: hci0: command 0x1009 tx timeout 13:29:49 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) ioctl$TCSETS(r0, 0x5402, &(0x7f00000000c0)={0x4, 0x9, 0x9, 0xfe, 0x11, 0x7fff, 0x5, 0x3ff, 0x1, 0x8efc, 0x0, 0xd30}) fcntl$setstatus(r0, 0x4, 0x6800) socket$inet(0x2, 0x1, 0x1) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:29:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6c000000]}) 13:29:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7a000000]}) 13:29:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1c00000000000000) 13:29:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, &(0x7f0000000100)=0x6, 0xfffffffffffffee6) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x106, 0x8505, &(0x7f0000001000), 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xb) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1d00000000000000) [ 2486.341829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2486.347724][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2486.353553][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2486.359295][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:29:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x100000000000000]}) 13:29:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x74000000]}) 13:29:49 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) getresuid(&(0x7f0000000280)=0x0, &(0x7f00000002c0), &(0x7f0000000300)) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000400)={r1, r2, r3}, 0xc) r4 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt$inet6_buf(r5, 0x29, 0x14, &(0x7f0000000080)="679f4630675ede816bfd846776ad78cc3d8f398d059e2a3d937376a47ce9f07b61143e6c1e49330e4ed8cbfe0f7f50aab23bee26c1a7e924d63e0ceddff0cac72549e816cd4b191ecbecd660aa638e1b17abc17a456319b6c38f2d3598caaf7cc5545e2a1b62b82877553d829b53b0686908879397efeeecfabf29b5ced8305a0c856bf028a289f5", 0x88) getsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000004c0)={{{@in=@dev, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@empty}}, &(0x7f00000005c0)=0xe8) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) connect$rds(r4, &(0x7f0000000200)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:49 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2488.341911][T10772] Bluetooth: hci0: command 0x1003 tx timeout [ 2488.348068][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2490.421884][T10772] Bluetooth: hci0: command 0x1001 tx timeout [ 2490.427964][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2492.501904][T21833] Bluetooth: hci0: command 0x1009 tx timeout 13:29:59 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000100)={{{@in=@initdev, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@multicast2}}, &(0x7f0000000200)=0xe8) r2 = getegid() lchown(&(0x7f00000000c0)='./file0\x00', r1, r2) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:29:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x1e00000000000000) 13:29:59 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x200000000000000]}) 13:29:59 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7a000000]}) 13:29:59 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:59 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) r3 = dup2(r1, r1) ioctl$UI_GET_SYSNAME(r3, 0x8040552c, &(0x7f00000000c0)) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r2, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80001}, 0xc, &(0x7f0000000440)={&(0x7f0000000200)={0x228, r4, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x4c, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @rand_addr=0x2}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x401, @mcast2}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_SOCK={0x3c, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x400}, @TIPC_NLA_SOCK_ADDR={0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x74020d24}]}, @TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_PROP={0x1c, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x41000000000}]}, @TIPC_NLA_LINK={0x84, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8678}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffff80000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x745}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}]}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x6d18}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x350b00000}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x2c, 0x7, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x44, 0x7, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x800}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100000001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}]}]}, 0x228}, 0x1, 0x0, 0x0, 0x4080}, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) ioctl$PERF_EVENT_IOC_RESET(r1, 0x2403, 0x28) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:29:59 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:59 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x100000000000000]}) 13:29:59 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2000000000000000) 13:29:59 executing program 1: setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:29:59 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x300000000000000]}) [ 2496.741795][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.747586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.753434][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.759199][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.765005][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.770749][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2496.821817][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2496.827587][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:29:59 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x200000000000000]}) [ 2498.661780][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2498.667905][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2500.741878][ T2098] Bluetooth: hci0: command 0x1001 tx timeout [ 2500.748799][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2502.821865][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:30:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x2900000000000000) 13:30:09 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) getsockopt$bt_hci(r0, 0x0, 0x0, &(0x7f0000000080)=""/79, &(0x7f0000000100)=0x4f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:30:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x400000000000000]}) 13:30:09 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_dev$vivid(&(0x7f00000000c0)='/dev/video#\x00', 0x1, 0x2) ioctl$VIDIOC_S_FBUF(r1, 0x4030560b, &(0x7f00000001c0)={0x8, 0x6, &(0x7f0000000100)="b1f0a8b04c9f1846be9cf2e8ce4481ca6ecffd175643dca8394c273e20f267a59376ee61be0c03840d4e0e66439ddcef5024fced97e5f724b812b988060f04f5d9673ac75db74c7e4f89b81cf7b3df9e62e7255bdc69efc3aff1c6958c601974aa9b3f008cd277d49ec83cbf78c5affdc3a13b30e62bb32a8fd3cf8fecce31db8ed15181685a8af4158a42c44773df0fabfdc960e323c44ff83fe105f0c01cb7bba2663ca61bf872bdf262c4", {0x8, 0xa6ed, 0x4f424752, 0x0, 0x6, 0x2, 0x7, 0x42cfcc01}}) r2 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r2, 0x400455c8, 0x0) ioctl$VIDIOC_S_PRIORITY(r1, 0x40045644, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:30:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x300000000000000]}) 13:30:09 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2506.901804][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2506.907712][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2506.913499][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2506.919221][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x400000000000000]}) 13:30:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x500000000000000]}) 13:30:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x4000000000000000) 13:30:09 executing program 1: r0 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x2) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-control\x00', 0x0, 0x0) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300)='nbd\x00') sendmsg$NBD_CMD_STATUS(r1, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2008000}, 0xc, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="98000000", @ANYRES16=r2, @ANYBLOB="020529bd7000fcdbdf25050000000c00050004000000000000001caf00070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="0c000400b40c0000000000000c0008000100000000000000080001000000000008000100000000000c000400070000000000000008000100000000000c00080001000000000000001400070008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1], 0x98}, 0x1, 0x0, 0x0, 0x24000000}, 0x20000000) r3 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x8001, 0x42602) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000100)={0x4, r3, 0x1}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f0000000200)={0x0, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0x1}, 0x90) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:30:09 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x600000000000000]}) 13:30:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x500000000000000]}) 13:30:10 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2507.221790][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2507.227568][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2509.141888][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2509.148127][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2511.221861][ T2098] Bluetooth: hci0: command 0x1001 tx timeout [ 2511.227937][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2513.301867][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:30:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe0ffffffffffffff) 13:30:20 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x700000000000000]}) 13:30:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0xfffffffffffffff4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x0, 0x1}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setrlimit(0xf, &(0x7f0000000100)={0x1f, 0x4}) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) ioctl$SIOCAX25NOUID(r1, 0x89e3, &(0x7f0000000200)) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000240)={0x1, {{0x2, 0x4e20, @loopback}}}, 0x88) 13:30:20 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x101, 0x8, 0x9, 0x81, 0x4, 0x7}) recvfrom$inet6(r2, &(0x7f0000000100)=""/232, 0xe8, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x401, @ipv4={[], [], @loopback}, 0x200}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:30:20 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x600000000000000]}) 13:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xe803000000000000) 13:30:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:20 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x700000000000000]}) 13:30:20 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4800000000000000]}) 13:30:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:20 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) getsockopt$inet_dccp_buf(r1, 0x21, 0xf, &(0x7f00000000c0), &(0x7f0000000100)) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r2 = dup2(r0, r0) ioctl$BLKTRACETEARDOWN(r2, 0x1276, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x6000000000, 0x4) 13:30:20 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xfdfdffff00000000) 13:30:20 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, 0x0, 0x0) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:20 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4800000000000000]}) 13:30:20 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4c00000000000000]}) [ 2519.781777][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2519.787899][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2521.861828][ T2098] Bluetooth: hci0: command 0x1001 tx timeout [ 2521.868008][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2523.941872][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:30:30 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x800, 0x4}) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f00000000c0)=""/228, 0xe4) 13:30:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:30 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x4c00000000000000]}) 13:30:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffff00000000) 13:30:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6800000000000000]}) 13:30:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x5, 0xfffffffffffffffe, 0x0, 0x2, 0x0, 0xeb40, 0x0, 0x0, 0x0, 0x0, 0x20000000b56d, 0x0, 0x5, 0xfffffffffffffffe, 0x6, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x82c4, 0x0, @perf_config_ext={0x0, 0x5}, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:30:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2527.941793][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.947623][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.953448][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.959206][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2527.965034][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2527.970796][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:30 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6800000000000000]}) 13:30:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6c00000000000000]}) [ 2528.021796][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2528.027627][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0xffffffffffffffe0) 13:30:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r1 = syz_open_dev$swradio(&(0x7f0000000200)='/dev/swradio#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_HWDEP_NEXT_DEVICE(r1, 0xc0045520, &(0x7f0000000240)=0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x40001) ioctl$DRM_IOCTL_DROP_MASTER(r2, 0x641f) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000080)={0xfffffffffffffbff, 0x0, 0x10001, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f00000000c0)={r4, 0x200}) setsockopt(r3, 0x104, 0x5, &(0x7f0000001000), 0xfffffffffffffdc4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:30:30 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x0, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2530.021832][T21833] Bluetooth: hci0: command 0x1003 tx timeout [ 2530.028121][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2532.102182][ T491] Bluetooth: hci0: command 0x1001 tx timeout [ 2532.108256][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2534.181830][T21833] Bluetooth: hci0: command 0x1009 tx timeout 13:30:40 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0xfffffffffffffff8, 0x0) ioctl$VIDIOC_DBG_S_REGISTER(r2, 0x4038564f, &(0x7f0000000180)={{0x6, @addr=0xfff}, 0x8, 0xfff, 0x20}) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x800, 0x58) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='lp\x00', 0x3) ioctl$EVIOCGNAME(r3, 0x80404506, &(0x7f00000001c0)=""/233) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:30:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_INFO(r3, 0xc0bc5310, &(0x7f00000000c0)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7400000000000000]}) 13:30:40 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x6c00000000000000]}) 13:30:40 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:40 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) r3 = syz_open_dev$vcsa(&(0x7f0000000400)='/dev/vcsa#\x00', 0x3, 0x501000) ioctl$VT_GETMODE(r3, 0x5601, &(0x7f0000000440)) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x6, 0x204000) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) r4 = getegid() getgroups(0x3, &(0x7f0000000100)=[0xee00, 0xee01, 0x0]) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f00000002c0)=[0xee01]) stat(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f00000003c0)=[r4, r5, r6, r7, r8]) setsockopt$TIPC_DEST_DROPPABLE(r1, 0x10f, 0x81, &(0x7f0000000080)=0x718, 0x4) 13:30:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7a00000000000000]}) 13:30:41 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7400000000000000]}) [ 2538.341829][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2538.347685][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2538.353561][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2538.359349][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2538.365179][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2538.370934][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:41 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x0, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) [ 2538.422883][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2538.428841][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:30:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="53ae0b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x2]}) [ 2540.261798][ T491] Bluetooth: hci0: command 0x1003 tx timeout [ 2540.267959][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2542.341835][T28529] Bluetooth: hci0: command 0x1001 tx timeout [ 2542.348714][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2544.421814][ T491] Bluetooth: hci0: command 0x1009 tx timeout 13:30:51 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000005c0)='/dev/input/mice\x00', 0x0, 0x0) setsockopt$TIPC_IMPORTANCE(r0, 0x10f, 0x7f, &(0x7f0000000600), 0x4) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r1, 0x40045431, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmc(&(0x7f0000000180)='/dev/snd/pcmC#D#c\x00', 0x101, 0x80000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/vsock\x00', 0x2, 0x0) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000000540)='trusted.overlay.origin\x00', &(0x7f0000000580)='y\x00', 0x2, 0x3) clock_gettime(0x0, &(0x7f00000001c0)={0x0, 0x0}) ioctl$VIDIOC_PREPARE_BUF(r2, 0xc058565d, &(0x7f0000000240)={0x1, 0xc, 0x4, 0x200000, {r4, r5/1000+10000}, {0x7, 0x2, 0x1ff, 0x7fff, 0x7, 0x9, "c185a400"}, 0x6, 0x0, @planes=&(0x7f0000000200)={0x7ff, 0x80, @userptr=0x8}, 0x4}) write$binfmt_script(r2, &(0x7f0000000400)={'#! ', './file0', [{0x20, '/dev/ptmx\x00'}, {0x20, 'ppp1'}], 0xa, "459086aebfa0d51f9f5574ba4e3280b56e2ebf5ab70a193483868537c016183e11c14c8f7205d4db66ec8f834d75d987f863bb23037242cc93dea5215c17bbc138fa79c5a8bd708523587199a9c5340b9b004d2fca0ae0ddc5fc3c30be23daa432c097d5c4533f390a6cd58a4cb157e9fef777eb7e35e87c7fc4aaaeec8a7349c27aad42558059c7a2596e4241cd043cc9e7ac2c8cb6b1cfc7f947a4260c0978a36b862a625d4c646be8098ea6c35edcfc3d2c88aac2f7af30a9d98ba7e03aaf95c042dc445b27ac5c5e286f40f93efe9a4caa38aa442aff9faa05f7d190f23d1f2226a6233124b48f61"}, 0x105) r6 = syz_open_pts(r1, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r6, 0x400455c8, 0x0) r7 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0x8, 0x80000) ioctl$KDGKBSENT(r6, 0x4b48, &(0x7f0000000140)={0x7, 0x5, 0x8}) ioctl$sock_inet_SIOCGIFBRDADDR(r7, 0x8919, &(0x7f0000000100)={'sit0\x00', {0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}) read(r1, &(0x7f0000000300)=""/228, 0xe4) 13:30:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x7a00000000000000]}) 13:30:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x3]}) 13:30:51 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r1, 0x4008556c, &(0x7f00000000c0)='syz0\x00') setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:30:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x2]}) [ 2548.501807][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2548.507667][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2548.513478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2548.519193][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:30:51 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x0, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:30:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4]}) 13:30:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x90000, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e24, @rand_addr=0x1000}}, 0x2, 0x9, 0x5a3, 0x5, 0xc9}, &(0x7f0000000180)=0x98) setsockopt$inet_sctp_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f00000001c0)=@assoc_value={r4, 0x401}, 0x8) ioctl$KVM_PPC_GET_PVINFO(r3, 0x4080aea1, &(0x7f0000000300)=""/4096) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="020000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:30:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x3]}) [ 2550.501809][T28529] Bluetooth: hci0: command 0x1003 tx timeout [ 2550.507941][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2552.581918][T28529] Bluetooth: hci0: command 0x1001 tx timeout [ 2552.588003][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2554.661935][T10772] Bluetooth: hci0: command 0x1009 tx timeout 13:31:01 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000100)={0xc0000000, 0x104, "4c44e5ccdc355a4e8fe80befef8040514a8379be563d43f1e0b25f00fe0eae5f", 0x7ff, 0x3, 0x5, 0x7, 0x6, 0x6, 0x6, 0x2, [0x0, 0x4, 0x10000, 0x8edf]}) r2 = syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x2, 0x80001) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000280)=ANY=[@ANYBLOB="02000000000000000000100000000000c100000000000000", @ANYPTR=&(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000001100000000000100000000000000", @ANYPTR=&(0x7f0000000240)=ANY=[@ANYBLOB='\x00'], @ANYBLOB="0002000000973741"]) r3 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r3, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:01 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x5]}) 13:31:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x200, 0x0) ioctl$SCSI_IOCTL_DOORLOCK(r1, 0x5380) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:31:01 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4]}) 13:31:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:01 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6]}) 13:31:01 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x5]}) 13:31:01 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:01 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) ioctl$sock_SIOCBRADDBR(r0, 0x89a0, &(0x7f00000001c0)='bcsh0\x00') syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) fsetxattr$trusted_overlay_upper(r1, &(0x7f0000000200)='trusted.overlay.upper\x00', &(0x7f0000000240)={0x0, 0xfb, 0x5a, 0x1, 0x2d7557f5, "43ab45f27f90206c7b1034b5caf76b5f", "ae54d8bba2b4ed29e9258c3a3f2d31879514e56c789a8f7d0955ffe18fd3542554ab6129973db8fbeabc428089a57f10b401014603334bdb971acd8c0630acd0fe55c7c227"}, 0x5a, 0x2) r3 = open(&(0x7f0000000300)='./file0\x00', 0x20600, 0x31) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x9, &(0x7f0000000400)=[0xee01, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xee00]) getresuid(&(0x7f0000000440)=0x0, &(0x7f0000000480), &(0x7f00000004c0)) write$P9_RSTATu(r3, &(0x7f0000000500)={0x88, 0x7d, 0x1, {{0x0, 0x69, 0x5, 0x2, {0x1, 0x0, 0x5}, 0x10000, 0x3, 0x100000001, 0x9, 0x7, 'vmnet0-', 0x6, 'bcsh0\x00', 0x23, 'wlan0ppp0,&]posix_acl_accessselinux', 0x6, 'bcsh0\x00'}, 0xa, '/dev/cec#\x00', r4, r5, r6}}, 0x88) r7 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) ioctl$SIOCX25SSUBSCRIP(r7, 0x89e1, &(0x7f00000000c0)={'lo\x00', 0x53ca, 0x9}) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r7, 0x84, 0x1e, &(0x7f00000005c0)=0x4, 0x4) [ 2558.901816][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.907646][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2558.913462][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2558.919210][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:01 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) accept4$inet(r1, 0x0, &(0x7f0000000080), 0x800) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x440000, 0x0) ioctl$RTC_WKALM_RD(r2, 0x80287010, &(0x7f0000000100)) [ 2559.141789][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2559.147612][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2559.153450][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2559.159200][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2559.165009][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2559.170746][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2560.741829][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2560.748032][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2562.821791][ T2098] Bluetooth: hci0: command 0x1001 tx timeout [ 2562.827879][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2564.901812][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:31:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7]}) 13:31:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6]}) 13:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mq_unlink(&(0x7f0000000080)='/dev/kvm\x00') r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:11 executing program 5: openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='memory.swap.max\x00', 0x2, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000500)='/dev/ptmx\x00', 0x40000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)={0x0, 0x10000000000000}) r1 = syz_open_pts(r0, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000004c0)='/proc/self/net/pfkey\x00', 0x20000, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r2, 0x40045542, &(0x7f0000000480)=0x7) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r3 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x4000, 0x0) ioctl$RTC_UIE_OFF(r3, 0x7004) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-monitor\x00', 0x200, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r3, 0x4008ae73, &(0x7f00000001c0)={0xff, 0x7}) read(r0, &(0x7f0000000300)=""/228, 0xe4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r4, 0x84, 0x13, &(0x7f0000000100)={0x0, 0x400}, &(0x7f0000000200)=0x8) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000240)={r5, @in={{0x2, 0x4e23, @local}}, 0x3ff, 0x6, 0x8, 0x8001, 0x8}, &(0x7f0000000400)=0x98) 13:31:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000100)={@rand_addr=0x620, @rand_addr=0x20, r1}, 0xc) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000000200)=[{0x0, 0x113, 0x101, "1a67f08b63c219be7342ac3784b8a31a8d64d5dcd4366622377f003bd70dfcd41878fa078a84517bae6ae7b4fc108dd2e8aabc97d6e88d3ca41d49775954db8c391e4a26a000a2a7fa2978aaaff7593ffd87b40610ad968ee3ab2711d5a447f616a5ce"}, {0x0, 0x119, 0x8, "4f915c99f03f2eff5abc66b4cb4c91d5b0ccf787"}, {0x0, 0x18b, 0x4, "5f2718b7ee61e9bc9f3b14dd640c5fdb336c5ebb6f481026eca2638271b8eccb4f54f4cbae7a6f7347374edd9b4d925a291814e20bafa78ea494b3be879b97c045ed0fc64dfdf1074ad019dce63c0e59c97720917da2df52f883c0c139d352cfbd003ddb20bffca59934429d6c3f08e21849e9b754915ef4893de835528741cc33e4dd54379b2529c57e0f"}, {0x0, 0x11f, 0x7f, "3bc86f3e9271aa5bad30335d0c5b44aba3d6fc73fe13c8c49825c7342341ef232d7108"}], 0xffffffffffffff9f}}], 0x400000000000047, 0x0) 13:31:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f2b69ffa6e6f6779195f470d56766bff98df82b2c835a493a97e11c659b763a410ba66e866c130ca75cb4f9c53fad34f00d139294"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7]}) 13:31:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x48]}) 13:31:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x40400, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000200)={0x14, "87ba1b66d7d81f4e131f202603d505ac204979b987350cd42fb66b1644edefc9689ec9d4c82fe51549ba8b08ab3f2ff185c8e1ef8fbc99b5664008f931792978d4c478abdc0d32ebf74be2054db12e82464ee32d8c27f3a2152ddaa21ebab9471d7722cdca6980a92510d3e9ea5db38d4d908193466ea6669f76f4861efc92af"}) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x1, 0x10400) getsockopt$inet6_tcp_buf(r2, 0x6, 0x3f, &(0x7f0000000100)=""/63, &(0x7f00000002c0)=0x3f) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$rxrpc(0x21, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:11 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(0xffffffffffffffff, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c]}) 13:31:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x48]}) 13:31:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f2b69a8cdb24b1bbb22a2133cd8c2e0e998500906aafd0bb85e49098cd351950249d20d4c7600d60e83124b5da0f431575b6880436056204c316b59a54db8742158377b8870cdb8000000000000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2569.301831][ C1] net_ratelimit: 2 callbacks suppressed [ 2569.301838][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2569.313187][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2569.318976][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2569.324788][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:12 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c]}) [ 2570.901795][ T2098] Bluetooth: hci0: command 0x1003 tx timeout [ 2570.907890][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2572.981813][T11029] Bluetooth: hci0: command 0x1001 tx timeout [ 2572.987882][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2575.061881][ T2098] Bluetooth: hci0: command 0x1009 tx timeout 13:31:21 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:21 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x68]}) 13:31:21 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, 0x0, 0x0) 13:31:21 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80001, 0x800000200d79e) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) capget(&(0x7f0000000100)={0x399f1736, r2}, &(0x7f0000000200)={0x6, 0x8bb, 0xffffffffffffff9d, 0x401, 0x2c7, 0x80000001}) 13:31:21 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x68]}) 13:31:21 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:21 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c]}) 13:31:21 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c]}) 13:31:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, 0x0, 0x0) 13:31:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) r2 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000000100)={r2, 0x80000001, 0x3f}, &(0x7f0000000200)={'enc=', 'raw', ' hash=', {'sha256-ni\x00'}}, &(0x7f0000001040)="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", &(0x7f0000000280)=""/53) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:22 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x74]}) 13:31:22 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000100)=r2) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:22 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x74]}) 13:31:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, 0x0, 0x0) 13:31:22 executing program 3: r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r1 = ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0fab69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r1, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r1, 0xae80, 0x0) 13:31:22 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a]}) 13:31:22 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000440)={0x0, 0x9}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffff9c, 0x84, 0xa, &(0x7f0000000500)={0x80, 0x1, 0x4, 0x80, 0x3, 0x100, 0x6, 0x1, 0x0}, &(0x7f0000000540)=0x20) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={r1, 0x40000004, 0x100, 0x400}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x40, 0x0) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_ENTRY(r2, &(0x7f0000000300)={0x90, 0x0, 0x3, {0x0, 0x1, 0x0, 0xfffffffffffffe00, 0xc58f, 0x8, {0x80, 0x81, 0x3, 0x2, 0x1, 0xfffffffffffffff9, 0xf3, 0x1, 0x5800db56, 0x9, 0x5b8a, r3, r4, 0x3b, 0x6}}}, 0x90) r5 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r5, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r5, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r5, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000400)=0x14) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = dup(r2) write$P9_RRENAMEAT(r3, &(0x7f0000000080)={0x7, 0x4b, 0x2}, 0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:22 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a]}) [ 2580.021821][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2580.027670][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:31:22 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x300]}) 13:31:22 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:22 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x300]}) 13:31:23 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x500]}) [ 2582.021901][T11029] Bluetooth: hci0: command 0x1003 tx timeout [ 2582.028001][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2584.102121][T10772] Bluetooth: hci0: command 0x1001 tx timeout [ 2584.108228][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2586.191864][T11029] Bluetooth: hci0: command 0x1009 tx timeout 13:31:33 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/ubi_ctrl\x00', 0x140, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r2, 0x40405514, &(0x7f0000000240)={0x1, 0x3, 0x3, 0x2, 'syz1\x00', 0x3}) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x80042, 0x0) ioctl$sock_x25_SIOCADDRT(r3, 0x890b, &(0x7f0000000100)={@null=' \x00', 0x3, 'ip6erspan0\x00'}) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0xc, 0xfffffffffffffffc) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000100)={&(0x7f00000004c0)={0x250, r2, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x98, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x101}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x324000000000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf8}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_BEARER={0x40, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'irlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e24, @multicast1}}}}]}, @TIPC_NLA_LINK={0x10, 0x4, [@TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}]}, @TIPC_NLA_MEDIA={0xc, 0x5, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'ib\x00'}]}, @TIPC_NLA_BEARER={0x3c, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x29}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000000, @remote, 0x11e4}}}}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0xac, 0x4, [@TIPC_NLA_LINK_PROP={0x34, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb7e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x18}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x716}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0xc, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3ff}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x17}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe0}]}]}, @TIPC_NLA_NET={0x40, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x2}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x100000000}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x2}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x40}, 0x0) set_robust_list(&(0x7f0000000400)={&(0x7f00000003c0)={&(0x7f00000002c0)}, 0x7}, 0xfffffffffffffe5f) setsockopt$packet_int(r1, 0x107, 0x1e, &(0x7f0000000200)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xfffffffffffffe3d) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r3, 0x81785501, &(0x7f00000000c0)=""/24) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x500]}) 13:31:33 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x600]}) [ 2590.669931][ T2685] Unknown ioctl 35083 13:31:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x600]}) 13:31:33 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x700]}) 13:31:33 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x4000000000080000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f1bf16d177906ee46b02c8d175d6275e675de682656bf69020dc53507a6226886068fa6d9a000aa39444f8655d89a221fa541dfaa77c34f522ea07681f0080f13d45a3c996b41345a1e3c989c5e6fbf3cd229"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:31:33 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e1d, @loopback}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000002c0)) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) io_setup(0xfff, &(0x7f0000000500)=0x0) io_cancel(r3, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x9, r0, &(0x7f0000000540)="b0eacad60387e36f72574d302ea8215f6a8dcde0175ca162070ae497cc8a230f49b1528f20f7bfb9ad364e357847218e163e0649afdfb20851e8d15191f4528228fa07644c080c8da6e014469a56ceada20c9f950196b7d938c36f8912a2885994467e45935d598f9e49bd6c0ca45bc61823a79bd47ba57ed18e20bbe3ce4729016c06eb64490f6c14bad8", 0x8b, 0x2, 0x0, 0x1}, &(0x7f0000000640)) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000080)={0x0, 0xfff}, &(0x7f00000000c0)=0x8) r5 = getpgrp(0xffffffffffffffff) perf_event_open(&(0x7f0000000400)={0x1, 0x70, 0x1546, 0x2a, 0x7f, 0x3ff, 0x0, 0x9, 0x40680, 0x5, 0x100, 0x4, 0x6, 0x4eb, 0x800, 0xdde, 0x3f, 0x1a2e, 0x9, 0x8, 0x3ff, 0x3, 0x800, 0x7, 0x7, 0xbe, 0x8, 0x10000, 0x5, 0x6, 0x2, 0x3, 0x1, 0xffff, 0x2, 0xcf3, 0x3, 0x81, 0x0, 0xfffffffffffffffa, 0x4, @perf_bp={&(0x7f00000003c0), 0x6}, 0x408, 0x5, 0xffffffff, 0x3, 0x948, 0xee55, 0x3}, r5, 0x8, r1, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000200)={r4, @in6={{0xa, 0x4e24, 0x20, @loopback, 0x4}}, 0x7f, 0x7}, &(0x7f0000000100)=0x90) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) connect$inet6(r2, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @ipv4={[], [], @loopback}}, 0x1c) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$XDP_UMEM_FILL_RING(r2, 0x11b, 0x5, &(0x7f00000004c0)=0x100, 0x4) r6 = openat$zero(0xffffffffffffff9c, &(0x7f0000000680)='/dev/zero\x00', 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000700)={0x0, 0x18, 0xfa00, {0x4, &(0x7f00000006c0)={0xffffffffffffffff}, 0x2, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_ACCEPT(r6, &(0x7f0000000740)={0x8, 0x120, 0xfa00, {0x3, {0x635c, 0x1e79, "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", 0x50, 0x100000001, 0x2, 0x400, 0x6, 0x0, 0x3, 0x1}, r7}}, 0x128) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000140)=@sack_info={r4, 0x7, 0x6}, &(0x7f0000000380)=0xc) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x28}}, 0xffffff6c) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) ioctl$KVM_ASSIGN_DEV_IRQ(r6, 0x4040ae70, &(0x7f0000000880)={0x1, 0x6, 0x4, 0x200}) 13:31:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x700]}) [ 2592.741788][T10772] Bluetooth: hci0: command 0x1003 tx timeout [ 2592.748004][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2594.821880][T10772] Bluetooth: hci0: command 0x1001 tx timeout [ 2594.827951][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2596.901863][T11029] Bluetooth: hci0: command 0x1009 tx timeout 13:31:43 executing program 5: connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) clone(0x3102001ffa, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0xb) ptrace$cont(0x18, r0, 0x0, 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f00000000c0)={[], 0x0, 0x0, 0x8, 0x20000000, 0xf8}) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000080)) ptrace$cont(0x18, r0, 0x0, 0x0) 13:31:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4800]}) 13:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = add_key$keyring(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$link(0x8, r3, r4) 13:31:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4800]}) 13:31:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000340), 0x4) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)="7046e8c66e9c054d0bc87d5244f24040ecb98bc6d7cab8c12c9a8fb47380c9e615c1cc2c6d633c66c157128a4aee2fd76b627e28a8ac6bb04fc66dd68761b8ea4b37937aa547f619cbefff66e59a6993081d12fc8e5f209885d81ad98e8001b82c573d4ac85cdcc34973a952853518f847c7d21d8e9c9bdd26c308524e7bb3aa652162fa7a37c0dfa58cf3c9864c869e9a7045f935dce96201edf82bc8ac7819a80918dd8765022d36920e2b1de905a2eee452b975b399c898a18cb7da87c5", 0xbf}, {&(0x7f0000000200)="7634d801b4fd8bc3403eb0e471d3db8b490d0ab504d939d7ec1e02eaa6de4f7549c37eb21371c11708205639ecc98b60ee60ecbe907ceb27bc407fb0e3a893b24b524b63285027d89f33e9d7aa9f13dc52f7795fe2e14a72bba2c99b95437e10354ac9396dabb035576d5128f9b2c30caf7a8b1fac290ddaa3529044929b8b3f8d9a0ed5a0d9c6f95d305a1289b56e37db5de44a0a83ae593bf0841bfe986ee42a07b1c8a84bb5e3fe6a73cc75631bcbf7c16fd17bd2cec9d900b5d27e6b2cbf1def68462ba89dc5fd3491f2a55c28a1c06141b551a78d24a03ca2250320899bf740cdc65534d6fa6833932a0a", 0xed}], 0x2, &(0x7f0000001fc0)}}], 0x1, 0x0) 13:31:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c00]}) 13:31:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c00]}) 13:31:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r3 = accept$inet6(0xffffffffffffff9c, &(0x7f0000000080)={0xa, 0x0, 0x0, @local}, &(0x7f00000000c0)=0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000100)={0x0, 0x8001, 0x4, 0xeb, 0x5, 0x9, 0x0, 0x6, 0x0}, &(0x7f0000000140)=0x20) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000180)={r4, 0x2, 0x0, 0x1, 0x0, 0x10001}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:43 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x4100, 0x0) 13:31:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6800]}) 13:31:43 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc, 0x80, 0x0, 0x0, &(0x7f0000001400)=ANY=[@ANYBLOB='P'], 0x1}, 0x0) 13:31:43 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r0, 0x4020ae46, &(0x7f00000002c0)={0x4, 0x5, 0x4, 0x1000, &(0x7f000003d000/0x1000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6800]}) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c00]}) 13:31:44 executing program 1: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c00]}) 13:31:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x7fd, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xffffffffffffffff) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = gettid() fcntl$getownex(r0, 0x10, &(0x7f0000000040)={0x0, 0x0}) setpgid(r3, r4) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$packet(r1, &(0x7f0000000480)={0x11, 0x0, r2, 0x1, 0xffffffffffffffff}, 0xfffffffffffffff3) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7400]}) 13:31:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="55e35d"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7400]}) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a00]}) 13:31:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a00]}) 13:31:44 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x5, 0x5, &(0x7f0000000080), 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) r4 = dup(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{}]}) r5 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x8400, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r6 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x10000) ioctl$EVIOCGSW(r6, 0x8040451b, &(0x7f00000000c0)=""/193) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000001c0)={0x10200, 0x2, 0x10000, 0x1000, &(0x7f0000036000/0x1000)=nil}) 13:31:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x1000000]}) 13:31:44 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:44 executing program 1: openat$vhci(0xffffffffffffff9c, 0x0, 0x400) keyctl$search(0xa, 0x0, 0x0, 0x0, 0x0) r0 = syz_open_dev$admmidi(0x0, 0x0, 0x0) ioctl$TCFLSH(r0, 0x540b, 0x0) getgroups(0x1, &(0x7f0000000140)=[0xee01]) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, 0x5) ioctl$KVM_ASSIGN_SET_INTX_MASK(r0, 0x4040aea4, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) fcntl$F_SET_RW_HINT(0xffffffffffffffff, 0x40c, 0x0) 13:31:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x1000000]}) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x5) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x1, 0x20003) ioctl$PERF_EVENT_IOC_QUERY_BPF(r3, 0xc008240a, &(0x7f0000000080)={0x1, 0x0, [0x0]}) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440)='TIPCv2\x00') sendmsg$TIPC_NL_NET_GET(r3, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000300)={0x114, r4, 0xc, 0x70bd26, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x18, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x345}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfff}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NODE={0x30, 0x6, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffffffffffffc}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xaf4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5d43}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x10001}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_BEARER={0x30, 0x1, [@TIPC_NLA_BEARER_NAME={0x10, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'ib', 0x3a, 'bridge0\x00'}}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}]}, @TIPC_NLA_SOCK={0xc, 0x2, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x9}]}, @TIPC_NLA_NODE={0x1c, 0x6, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x7fffffff}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x100000001}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xa94b}]}]}, 0x114}, 0x1, 0x0, 0x0, 0x4}, 0x20000000) ioctl$KVM_RUN(r2, 0xae80, 0x0) setsockopt$RDS_RECVERR(0xffffffffffffffff, 0x114, 0x5, &(0x7f00000000c0), 0x4) 13:31:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x2000000]}) 13:31:45 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_sco(r1, &(0x7f0000000040), 0x8) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x2000000]}) 13:31:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)=0x4) setsockopt(r1, 0x107, 0x20, &(0x7f0000000200)="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", 0x165) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) gettid() wait4(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x92, &(0x7f0000000240)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x30b}, 0x32a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0x80000000, &(0x7f0000000340)=0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2040, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:45 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x400) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x200000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$TCFLSH(r2, 0x540b, 0x100) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x10000007ffffffc) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) 13:31:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x3000000]}) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2602.581812][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.587698][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.593537][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.599294][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x40000000000) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4000000000000024, 0x32, 0xffffffffffffffff, 0x0) r3 = userfaultfd(0x0) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r4, 0x84, 0x8, &(0x7f0000013e95), 0x4) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r6, 0x8912, 0x400200) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f00000000c0)={'t\x8f\x84m_slave_1\x00', &(0x7f0000000700)=@ethtool_perm_addr={0x1a}}) close(r4) close(r3) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x2a2900, 0x0) 13:31:45 executing program 1: r0 = openat$vhci(0xffffffffffffff9c, 0x0, 0x400) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) r1 = fcntl$dupfd(0xffffffffffffffff, 0x0, r0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, 0x0, 0x0) r2 = syz_open_dev$admmidi(0x0, 0x0, 0x200000) prctl$PR_GET_THP_DISABLE(0x2a) ioctl$TCFLSH(r2, 0x540b, 0x100) r3 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/rt_acct\x00') r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r5, r4, 0x0, 0x10000007ffffffc) fcntl$F_SET_RW_HINT(r3, 0x40c, 0x0) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x3000000]}) 13:31:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4000000]}) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 1: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000009) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x8001, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000140)) readlinkat(r0, 0x0, &(0x7f00000004c0)=""/90, 0x5a) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) write$P9_RRENAME(0xffffffffffffffff, &(0x7f0000000080)={0x7, 0x15, 0x2}, 0x7) setpriority(0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000440)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000240), 0x0, &(0x7f0000000540)=ANY=[@ANYRES32], 0x4}, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x80000, 0x0) write$P9_RREADDIR(r1, &(0x7f00000006c0)={0x49, 0x29, 0x0, {0x100000000, [{{0x0, 0x3, 0x1}, 0x0, 0x0, 0x7, './file1'}, {{}, 0xffffffff80000000, 0x0, 0x7, './file0'}]}}, 0x49) ioctl$RTC_IRQP_READ(0xffffffffffffffff, 0x8008700b, &(0x7f0000000680)) ioctl$IOC_PR_RESERVE(0xffffffffffffffff, 0x401070c9, 0x0) r2 = creat(&(0x7f0000000300)='./file0\x00', 0x0) fallocate(r2, 0x0, 0x0, 0x8200003) [ 2602.821810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.827636][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.833449][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.839184][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2602.845013][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2602.850757][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:31:45 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getsockopt$inet6_buf(r1, 0x29, 0x15, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4000000]}) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x5000000]}) 13:31:45 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2603.055689][ T26] audit: type=1804 audit(1552224705.795:65): pid=6306 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir213475698/syzkaller.xGff1r/4874/file0" dev="sda1" ino=16838 res=1 13:31:45 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) getsockopt$inet_int(r0, 0x0, 0x0, &(0x7f0000000100), &(0x7f0000000380)=0x4) setsockopt(r1, 0x107, 0x20, &(0x7f0000000200)="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", 0x165) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x200000000000013, 0x0, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$PERF_EVENT_IOC_RESET(0xffffffffffffffff, 0x2403, 0x1) gettid() wait4(0x0, 0x0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x92, &(0x7f0000000240)={&(0x7f0000000040)=@getqdisc={0x24, 0x26, 0x30b}, 0x32a}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0x80000000, &(0x7f0000000340)=0x2) setsockopt$inet6_tcp_int(r2, 0x6, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00'}) r4 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm-monitor\x00', 0x2040, 0x0) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400)='IPVS\x00') sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x5800000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x1c, r5, 0x1, 0x70bd2d, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x20004000) ioctl$RTC_ALM_READ(r4, 0x80247008, &(0x7f00000000c0)) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:45 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x5000000]}) [ 2603.189577][ T26] audit: type=1804 audit(1552224705.835:66): pid=6308 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir213475698/syzkaller.xGff1r/4874/file0" dev="sda1" ino=16838 res=1 13:31:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r1 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x5, 0x800) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @multicast2}}, [0xfffffffffffffff9, 0x0, 0x0, 0x9, 0x9, 0x470, 0x0, 0x1, 0x5, 0x3ff, 0x3, 0x5, 0x6, 0x1, 0x5]}, &(0x7f00000000c0)=0x100) setsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000001000)={r2, 0x80003, 0x100, 0x6}, 0xfe94) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000000300)) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6000000]}) 13:31:46 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f3669"]) socketpair(0x2, 0x80000, 0x9, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockname$netlink(r3, &(0x7f0000001080), &(0x7f00000010c0)=0xc) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) read$FUSE(r4, &(0x7f0000000040), 0x1000) write$FUSE_INTERRUPT(r4, &(0x7f0000002100)={0x10, 0xfffffffffffffff5, 0x2}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6000000]}) 13:31:46 executing program 5: lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7000000]}) 13:31:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x80000) ioctl$SG_GET_KEEP_ORPHAN(r2, 0x2288, &(0x7f00000000c0)) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:46 executing program 5: lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x80) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000240)={0x101, 0x8, 0x9, 0x81, 0x4, 0x7}) recvfrom$inet6(r2, &(0x7f0000000100)=""/232, 0xe8, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x401, @ipv4={[], [], @loopback}, 0x200}, 0x1c) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:46 executing program 3: r0 = syz_open_dev$adsp(&(0x7f0000000180)='/dev/adsp#\x00', 0x5, 0x0) getdents(r0, &(0x7f00000001c0)=""/30, 0x1e) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000680)='/dev/hwrng\x00', 0x2, 0x0) accept$ax25(r2, &(0x7f00000006c0)={{0x3, @bcast}, [@null, @rose, @default, @null, @null, @netrom, @netrom, @default]}, &(0x7f0000000740)=0x48) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r4, 0xc008aeb0, &(0x7f0000000300)=ANY=[@ANYBLOB="9fd97c817c4a772aec7ef203d8975ba24a4c87b388dd91a20a89e693e09243d8789b33e2718c512ac2267415003f48001c883823090e9c0bf337789c3da0d009f24e5e48299de1735b7d4fc852f606d0197ea8f0dea7b3ae771ac643d4b359780d725fb36012dc6d7ea71c96a781819e97476f8c29b4ecb9045de7af857d1ddd473419c4f3f955d64a5ec3a51a06392e7dd0c61b1377560a118fca0c2906d63b6642e35f45c3bc64a16201a808f3408208243284ffeaa84ced44778d", @ANYRES64=r3, @ANYRESHEX]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000025000/0x18000)=nil, 0x0, 0xfffffffffffffe57, 0x0, 0x0, 0x0) r5 = request_key(&(0x7f0000000040)='id_resolver\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)='#^$*keyringwlan0\x00', 0xfffffffffffffffa) keyctl$KEYCTL_PKEY_QUERY(0x18, r5, 0x0, &(0x7f0000000100)='/dev/hwrng\x00', &(0x7f0000000140)) splice(r0, &(0x7f0000000200), r3, &(0x7f0000000240), 0x8, 0xc) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:31:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7000000]}) 13:31:46 executing program 5: lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x48000000]}) 13:31:46 executing program 5: mkdir(0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x48000000]}) 13:31:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0xfffffeffffffffff) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000080)=""/230) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x1ca, 0x800000000000000, 0x0, 0xfffffffffffffe6d) prctl$PR_TASK_PERF_EVENTS_DISABLE(0x1f) lsetxattr$security_selinux(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', &(0x7f0000000200)='system_u:object_r:su_exec_t:s0\x00', 0x1f, 0x0) sync_file_range(r1, 0x7f, 0x80, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:46 executing program 5: mkdir(0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x3, "f06123"}, &(0x7f0000000100)=0xb) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f0000000200)={r2, 0x7, 0x1, 0x8}, &(0x7f0000000240)=0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:46 executing program 5: mkdir(0x0, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c000000]}) [ 2605.941799][T10772] Bluetooth: hci0: command 0x1003 tx timeout [ 2605.948028][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2608.021930][T10772] Bluetooth: hci0: command 0x1001 tx timeout [ 2608.028049][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2610.101887][T10772] Bluetooth: hci0: command 0x1009 tx timeout 13:31:57 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x80000000, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) r2 = syz_open_dev$midi(&(0x7f00000000c0)='/dev/midi#\x00', 0xfffffffffffffffe, 0x20040) write$capi20_data(r2, &(0x7f0000000400)={{0x10, 0x3, 0xcf, 0x81, 0x7ed0}, 0x1000, "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"}, 0x1012) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:31:57 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c000000]}) 13:31:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) pwritev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="d1e12a250ff33d6def4236f2e730d2adba17c11db0715e4b4a30f0ecf4d72354816a2a05d6c338360748117973f5edd7e61b5d431f756ff2c349c5b076dcf38bedfed4feafc6c0cd37aadf673647c68ad8d5127840a2e09307f5cb3116b96651cb69c57ebaefa920aa008e7618f5e55aaf0f4a7b9ac5592e0704969f76be095d1528ac738ffbd1", 0x87}, {&(0x7f00000001c0)="72bdff7bb3f8f623b226aff8949d2bacb08ce7c9b4519e2faefea2f1c01c17270d932c40be69c72853aa4da38645bed18bd46492ce1d6d06f7113aadd395ceb83da63ec7a035c1653c1d4c577fd79481eae7025a06f2798297db6f4f78e3a9d63626c81b588c60a117338291a8541ec502c41df98ebdde38495bc250da4c135f0340e18f33a2b6fea2", 0x89}], 0x2, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f2b693d9889008d71e0cd8a12745695a482d5e52113d5b89855fdefbb25237b732cb0df82f81e9940228006e6a52c38252d53211913c84c011df9afbb17ebae76575aabe037e16d292cdfe9939b248af7f960006753f0590a4384dd20ad1403488f9897a8318790bb2dead20b9b3f2df5c26e3e22396016525b769f6471945ad89aa74707fc37a340ad784e27d9609b4abd412be9bba6e8877139"]) clock_gettime(0x18d9aea7c23c79f7, &(0x7f0000000300)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:31:57 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:57 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x68000000]}) 13:31:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000080)=0x5, 0x1) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:31:57 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:57 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x68000000]}) 13:31:57 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c000000]}) 13:31:57 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff80000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="0ee5e1d7f1f13f0df82bae9e6711f9ae6c653b74ad0fc3a789ea075f", 0x1c, 0x5}, {&(0x7f0000000140)="fe66e1fdebc9a5e3ec7b9d0ed582728eda6dbb9091edf480361b8ce95c2850d05d2f9d78e2a6a9650965829532c19d44d80c6a1f8316a46792d88b94a05541d6a19c672cd7ae7c265cc12dfd3d9f6ddb00acbd5aafb00e209e208cf3d99d", 0x5e, 0x9}, {&(0x7f00000001c0)="e5608cfde7cc0c292c1a8daed9847451b05c407fea213ba70a69567284d3f8ae95b3340377ffa2359a8389e6a7d28f890d1794f2483876f43c3bbd798a08558618f21e283d139bfee65e5e0be073e4bb908ad19cbc1e75c29ae1dcf4ff283932c36c1c2612f35d89e43c19e7363a6f3e665602548bd5c64c5ee202d7ab2c89cf501611c13a55cd655c13fc499b977961930dd5902639f323d47b5879e29c52fa9a711ada0cbd0b66c64ab1bc4ab012eed7bd7c0640fc0839db5836c6107403a20a60e96d0d02a7469f48c53f4ff2e73e921d85589453806a31716305a64315fe", 0xe0, 0x4}, {&(0x7f0000000300)="a71896e3b735a45df708c4368cae8d97c3bc595c842156bde826c90305f9cf9b3e54377099212d60c1805c1f965bfdf5b99cbb165ed2d90de60eb0d8f478e144edceba62eb0fb07fa93a7c7ce855152f50333c744902bffa9c1d3a57525b0f61", 0x60, 0x28}], 0x211800, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nodiscard='nodiscard'}, {@dioread_nolock='dioread_nolock'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80000001, @null, @rose={'rose', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:31:57 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(0x0, &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:31:57 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) ioctl$DRM_IOCTL_AGP_ENABLE(r2, 0x40086432, &(0x7f00000000c0)=0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 2616.421933][T28529] Bluetooth: hci0: command 0x1003 tx timeout [ 2616.428041][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2618.501830][T10772] Bluetooth: hci0: command 0x1001 tx timeout [ 2618.507903][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2620.581927][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:32:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c000000]}) 13:32:07 executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="b7f2288a911993f0265df5cf1cdd8b55", 0x10) 13:32:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x74000000]}) 13:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) ioctl$FS_IOC_ENABLE_VERITY(r0, 0x6685) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20\x00', 0x4000, 0x0) ioctl$KDGKBMODE(r3, 0x4b44, &(0x7f00000000c0)) 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) fsetxattr$security_ima(r1, &(0x7f0000000200)='security.ima\x00', &(0x7f0000000240)=@v1={0x2, "500f78986cd8dcd8bc7b65"}, 0xc, 0x1) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000080)={0x0, 0xfffffffffffffe01}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r2, 0xe9}, 0x8) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) fanotify_init(0x20, 0x8400) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x74000000]}) 13:32:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a000000]}) 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', 0x0, 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REGS(r2, 0x8090ae81, &(0x7f0000000080)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:07 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x10, 0x4, 0x4, 0x3}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000001100)={r0, &(0x7f0000000080)="fd", 0x0, 0x2}, 0x20) 13:32:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vga_arbiter\x00', 0x121201, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='\x00', r1}, 0x10) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 1: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0xee67, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$ext4(&(0x7f0000000100)='ext3\x00', &(0x7f00000001c0)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x100000000000000]}) 13:32:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a000000]}) 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) mlock2(&(0x7f0000034000/0x2000)=nil, 0x2000, 0x1) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cachefiles\x00', 0x400, 0x0) write$UHID_INPUT2(r3, &(0x7f00000000c0)={0xc, 0x2f, "b657e09322c9f15d238b7542b07f0d819a2fa45cff533c872d2560d93e155353cebe0f3d21065c6eaaab3dd978de4e"}, 0x35) syz_init_net_socket$rose(0xb, 0x5, 0x0) [ 2625.041647][ T9218] EXT4-fs (loop1): VFS: Can't find ext4 filesystem 13:32:07 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(0x0, &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:07 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r2 = syz_open_dev$cec(&(0x7f0000000280)='/dev/cec#\x00', 0x0, 0x2) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f00000002c0)=0xa03c) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$FS_IOC_FSGETXATTR(r1, 0x801c581f, &(0x7f0000000140)={0x7, 0x8, 0x8, 0x7, 0x7cd8b567}) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) getpeername$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) bind$packet(r1, &(0x7f0000000100)={0x11, 0x1e, r3, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) r4 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000200)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) connect$inet(r4, &(0x7f0000000240)={0x2, 0x4e22, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:07 executing program 1: syz_mount_image$btrfs(&(0x7f0000000080)='btrfs\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x1, &(0x7f0000000400)=[{&(0x7f00000008c0)="8da4363ac0ed0000000000000000004d01000000000000000000000000000000ecf6f2a2299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4dd2f873", 0x4b, 0x10000}], 0x0, 0x0) 13:32:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x100000000000000]}) 13:32:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x200000000000000]}) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2625.265543][ T9454] BTRFS: device fsid ecf6f2a2-2997-48ae-b81e-1b00920efd9a devid 0 transid 7600338 /dev/loop1 13:32:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x200000000000000]}) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000000)=ANY=[]) ioctl$KVM_SET_FPU(r2, 0x41a0ae8d, &(0x7f0000000080)={[], 0x87, 0x0, 0xe0, 0x0, 0x8, 0x0, 0x6000, [], 0x8000}) write$binfmt_aout(r1, &(0x7f0000000300)={{0x1cc, 0xdb, 0x10000, 0x45, 0x6f, 0xa00000000, 0x14, 0x20}, "3734cca40e40f0554c2c0a947493fe42e3dfdda989da862bcd0dcbfaa4507ed9", [[]]}, 0x140) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:08 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/igmp\x00') socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) sendmsg(0xffffffffffffffff, &(0x7f0000002fc8)={0x0, 0x0, &(0x7f0000000540)}, 0x0) preadv(r0, &(0x7f00000017c0), 0x1fe, 0x400000000000) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', 0x0, &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x300000000000000]}) 13:32:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x300000000000000]}) 13:32:08 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) sendmmsg(r1, &(0x7f0000002440)=[{{&(0x7f0000000080)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @loopback}, 0x3, 0x4, 0x0, 0x2}}, 0x80, &(0x7f0000000780)=[{&(0x7f0000000100)="80e24d7a3838d8d582ec8017a94c4b44e7dec5502dbc3232ca9766f3df04f5441a5b0e", 0x23}, {&(0x7f0000000200)="9d40535fb9c3dfb4d54cf40537829b1550b2a296862a7a4275e1153fc940fe2a9d9d618372e55144133b15bdd8d8b7975c03cda178845d4af1440a791583d0deb455667bca86632073ab63067af2824b81b799db924d7cc9ca8413ec3b26babc130a306eadc0a377fa46aad7869256091357cfa6d0cdc3469498a3d76118aea0cee80cffa67f1309d64c", 0x8a}, {&(0x7f00000002c0)="02a71261fe5612d21c961fbee2cdb5e9634e0dc8a451cbdfd8c78e5823476fcd50616b49c485e7423456fee9702238fae05cc5e318190519392e905f9a9f905bb74d0da2b779cb5152c4e1b7111795aec51da2f27cc5517ce0a3fb7b4f612f36cdf7fb7b5ea64fe0332ed5aac90812e9d629926a9b7a9e368f969c4b032e0c35", 0x80}, {&(0x7f0000000340)="a670c1b323caafef447b211dce10e6ee89c5560369e8f821525d4f643014309d8e8d548bd4825ee9b1eb18ed79543ec43b10cee1c9d6909d641db8f5c507cd4c365c79b18628e1a6962ddc43885a791003fc86163cd3057b75f052b1c3acb06dd5ce756d9d9f740b8ff72a61f4b479a4fe98aff9ac9b7783da5a8f3fae6af4b60255216b05babb0cc284438e62ae453eeb4f1c278787e04ce0fd1b82bd3c6ea97e7f32", 0xa3}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000000400)="bd225322fef5af87deec33c45f33afad101a07f1a2", 0x15}, {&(0x7f00000004c0)="1d44967e6e330784362ccb09c4bf8adcb556a53a8098a6eed0457adcb92c99b2a7c404a20681d90e15a2fc2ab80e54ebdb3c4ad92dc993f4c2fca5ae0eda58c5d894f0740564f28bf89db4243c16e9fe9d37dd9d6096ca3fb43c2d719e297839816797c2c918cca9885426b749181381c42cf5c9fb2a1ce2fc1a85c8914e3df1dc65f5ed4d42a2e1e7fa0e667895c4d85ff847731e66d688188e683a90e05c897ef3e2f786770e9121c2d1acb8a0a166ede629550d4010efd3", 0xb9}, {&(0x7f0000000580)="d2c87be4c507c25bf9b438f7d93692ae8ca2ede93f12a964234b12edd5e7e106d060168fb4dc9da87e9c675718c35e9bd02ad6625b1ec1645f5528461e42da9d4dd2e542002d89e5ef84400504aab33ad7d9f219751c119cc542ea8c9f5125258912ef6881327f2bb75b97680d72dc1579054c7776d46978e4b4ad4a6f19", 0x7e}, {&(0x7f0000000600)="e6712ccb69fab94c4033c552a1128ed75070ddb18fca86ddc17cc8b98c759295256de68ebed132a59f0a446dba1f9a1e31ed06aa771a45f0a6a34a482141afa0d5a01690ff33268546a588f28b1df039c561b72f1fd29dd38da4", 0x5a}, {&(0x7f0000000680)="1b0efbb7d2e2a50223c635235354a19f5f4b6247de00be8ca6a8d3af98b58cd0b1e996af9265abe4783cc73c638713886a84f8c6f6451f8e036adc497c42b60ec08bcfc8844b54540cb61f58d71bd38d74e0cbabb172166dca755d1d768e08e51bc390458c83b6a7d1bc1c7a167b75841502b2c1e916139b4f2118252e2a877bf3a8d6e613cf545d1fef6a35a5176c4e523a040c8ae4237416adf1595b4f2bb9e6c00f1468e2b3d82f95861fc96b6cc23b81440a6e4f19fe2e59ecfbee44df5a93b5a5c30a8e22470d39bae446b3f5859639522001223c34f952cb4b8d", 0xdd}], 0xa, &(0x7f0000000840)=[{0x30, 0x115, 0x1, "21c6cab4b9ec444cfabdf4c07c52dad860ef183b678597392b"}, {0x28, 0x129, 0x3, "9cba80015824e4b66f19829f835c00620890cf11fd74db80"}, {0xc8, 0x0, 0x101, "87fa01aa305792a0ae7366e31f5fa19950fcd336b8d2aa157c50ac7f2a633cc474392193a1e3439cc82b1cf6e1f0a93bc705c128343065f86450ed6cae9851da91d46332ab796ae0fcdffc2c6aea4ad802e7cb2ea5af1ed6f749d5501d07611a2a804ac4d052e1fec2433b7c237aff4d54229a1b9c3fc0c11c954a59b174138a55b6eae577c300743d8febae65e8ad47608953294c6f7ca2e41ede2d01f3ee93946a8f98dc7faa33e4d37ba570e5041aab1f"}, {0xc0, 0x6, 0x0, "62b49b4d67fd0fde132f5a693527fed5741424d36f93a7e12e208be64c9324a123dd8d099826117c3c6f3cc916a771997f8ed2292f12967d92cb442eebb545236645d0c2b06a2f2f61e22bd7829b3f1565e9a1434c6227cfa1c0c156c5c733ba0b6b11ebbf8989c135eee7f27db250de509cf64058d370f1f37546e66763fd4e704a828f09862a4ca028f2bd0ca1370086213b6802c32883f697575ee31cc31b5fb47e73b55dfbaec274c53d21"}, {0xb8, 0x104, 0x3, "f949cf0f25a7eeb4e29b1297f607742e20cd4c8db2ad8a377ab2c0e7ba592e4ee5fb76692d6ad230590a022adb6cc349124a3d40600bccc3fc430c58896ee23b6b51a26731ddc9234e0821bcdd345755af2cd725acf76b69510b08b2e05434270c2447f5e23398caad1e9fe081e60ff0d7b14f7e3a8915a680209067bde79c4ecbd486ca9284d7506156df328357bf6965b67fb50879283d8091b042cfb8588931e713f5ad"}, {0x30, 0x11b, 0x100000000000, "139c2e26b64cf673f1a924ea551b4d6f3b088655b515f7ed577641b0f855"}, {0xb8, 0x119, 0x100, "06fa06cd0090480b7b63d759a72ceeeffdc4d2b34d29f70d5782a73abf5517c4b1303167951edaba72ed53bcb4d0988b5bc68ceab352c26f19d1d87c034131cf79ef49027cf3ab11db24e661583895ea02b117a7f0d40d67b22d8674ec74b36eaa1541f0ec5e370215984d6014b9a49962862f21f4492f9f0c5ecb2b9bbb2a897aefcbc816e66d1400b4abbd7cc66aa9ea11f29b0af6577128b55c83878dc84798"}], 0x380}, 0x7fff}, {{&(0x7f0000000bc0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e20, @rand_addr=0x800}, 0x2, 0x4, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000c40)="f2457a36274e3d1c04602f53c8d92a837c89d03667918b893952aff8ef34a4c9168789d82e8a20ec917a7fcb0e2643823a8abcd0355ce8f8d712e34b91c9c1fbea785017cd669374a3efbe41118e134caa14a04e7365204e879c8d0a513df0b3f4286bfb4cb9023199b9256d684122ff924ab8fac68f71f43aff4c49dcab089dc03b581385a8affe4eb72a2bce8d3af25f2a106959d7b5b52a8077d7a8e9e0332adc4992ac553f479b37e481a8716321a32f58a9483c587bc371a58fb3749277d6f4b88fe6885bc975c988cb32b7875ef4511159e382415ecac79f6a769206acf2388ce8587fcbe2e43ee9b7b2ed", 0xee}], 0x1, &(0x7f0000000d40)=[{0x108, 0x6, 0x764, "9525a0c45ec28caf3af8a1f8adaf0e17b6a0d5013651e777cc77a51906b0735841e76b19d79b0aee5b1e0d10a2114ecf672721d6f0ef8fad3f2865b9b8ff5dbf68133a9314edb7495296d2c8b546565ce898e27abe70335e85a710d216758d080204f6cffff669c0d45b570ef14220482b472a36d96350f31c91fb20a4e46b19bafd513351b300938f013d457bb0213653348bb0391de639f6d9f65b0facd2084d900924db419bc06dd490e5f3642b659eb0cbb537101f960892090b50b6592474a45373a848f24ab94c26d54dc97615cccb0cc1f76aa78e7830d7dc7cb552a7a4fb1262fc279bd36fa095cddd38b7d6a6c050"}, {0x58, 0x1, 0x10000, "83de887dce8209e37ed4a4b25a0e76e2d5a1705c904aae70b428b9314f1320620b929f44681c9a7b52e536c753134c8b5e95dc9738e820b5ffbcf5d0e376ba6e1715949fc624b5"}], 0x160}}, {{&(0x7f0000000ec0)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x4, 0x1, 0x1, 0x3, {0xa, 0x4e20, 0x8, @empty, 0x9f}}}, 0x80, &(0x7f0000002100)=[{&(0x7f0000000f40)="0f07ee71dfae0c7aecb30bae9bf4880d04870fe98c671421910c79e3313eaddbc707847aad99c9b49c213be655f8a5aa724ea6bb0ff4701def44a21c1893d836b184ca21c8a24c2e78b8f87c2307ef0c6d6fd7643ff34c731f29757eb28d0765d47d12568cc6e701084a438d9a042623cc55ff50899a200da48522970ad19c991e476857c10f4bf705f4b8e6002cad272c511fd74f6824ff9d2a576819465149d995f810f12ffbd7de521a93f093957a767dfe94", 0xb4}, {&(0x7f0000002040)="f37ec31d6442cecfc4d07934ca9ed90fcd2d6d5bdab98d2eb9d7c03462bbaabf1c69779678c8abbca8b3872b6cc658a92683c746d31520dc14ad985d8ce720a30ef19936909ff79866621055e313571e4f1855b0dfec3318bfa39eb52e9a4567c479497273c1d6889cfbbcd0617f5e30ca67e768627b14b86c4cfb650921be6cdf2a2a293dea4cc7a5a1dc0f7b16", 0x8e}], 0x2, &(0x7f0000002140)=[{0xc8, 0x119, 0x8, "c3c2f113e3d2b279743b40bf6d0267667c39c823415fc8b33d3d4083bab608308322f6aedb53901da428016468166c241a7f1472d0eac048d586d3a93dde71e9cb1a9bad5e182c8b549f566f1e9bd923753e71c9133f2434260748b381237140c90c778d30fabe8e03f691a112516e34dacd6c2b359ac425925a6ad7e8f4a8deb15c5b14b14ce4588810379c5594d81515b836ff3f1907d459f56b1867b0e59e156cca898f59e5187e3d768f007e94533b34"}, {0x10, 0x113, 0x5}, {0xc8, 0x10c, 0x9a, "58cd67396d65788784fa675cec7d6c0bc783182d898713f833e9f8845db33d597068520b6bdf9328fe91bd79e2b4bc7912cd0b28d15889c46e0a43d8d49f1032f6d9b989725795be3eaea41f926da702823fc8ce568fcf7a9ecbd59d24910660190548083464a2f938bf17e9c1a888c34e9a500b23266195386f5915ec0353200c3757735fa61435fa9354a6db3c337a600cc54783dbcc70e95d9b3e92f1b13b8cdcc6c6d7b03727cb14c1d0bd94c3b527c3"}, {0x108, 0x1, 0x5, "4dcda495c12b78b1403fb6b729a9614fcc974d1005b03c89bc2ce3413914566056a8324e25a2ce011177a21499ec4a1da4224979aef8b4f48e95c395e22eb2b3b8b470e1f79cb0324f2b6b23c3c4fb47190a24d2ad6c2f8d9b9b291038a4ee72fdd4b52829b47a0b439950e0bd1fb6b03e5872d4196d1e00b09853003636ef2af40a81ac54df75dd610ce5b0a814865ff4b7c1d328f29a786eb70c9dfc83b8f8169253442f9e7dfb9830d6eeff4405b23effa0a5becd6600ad1155220fd862e94127acf55068f0775f873a8d64f7987fe6e350461dd2a739cf5a116ad6270d76265855b16ebb1f79c8afe95805380c9ffb"}, {0x30, 0x11e, 0x10001, "79ef1461db38ebb68c2bfe0d87f588695b43dc0d157a1c95d5b68fb12981"}], 0x2d8}, 0x3}], 0x3, 0x1) 13:32:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0xfff, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000000c0)={0xffffffffffffffff, 0x3, 0x1000000000000000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x400000000000000]}) 13:32:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x400000000000000]}) 13:32:08 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) clone(0x3102001f7b, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r1 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setregs(0x10, r1, 0x0, 0x0) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x800, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000000c0)={{0x73, @multicast1, 0x4e21, 0x1, 'dh\x00', 0x2, 0x6, 0x74}, {@remote, 0x4e23, 0x4, 0x2, 0x7b0, 0x8000}}, 0x44) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x500000000000000]}) 13:32:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x500000000000000]}) 13:32:08 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x600000000000000]}) 13:32:09 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x102, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r3 = fcntl$getown(r1, 0x9) getpgrp(r3) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x600000000000000]}) 13:32:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000100)=0x7) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x200, 0x0) ioctl$sock_bt_bnep_BNEPCONNDEL(r3, 0x400442c9, &(0x7f00000000c0)={0x20, @link_local}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:09 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x700000000000000]}) 13:32:11 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) clock_gettime(0x0, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000a80)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501000021eb4e0100000000000000b77def186da2041a"], 0x1}}, 0x0) seccomp(0x0, 0x0, 0x0) membarrier(0x32, 0x0) 13:32:11 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:11 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup(r0) bind$isdn_base(r1, &(0x7f00000001c0)={0x22, 0xdd5, 0xc, 0xffffffffffffffff, 0x8}, 0x6) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000008}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x800, 0x70bd29, 0x25dfdbfc, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004001}, 0x4000801) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f000002e000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x700000000000000]}) 13:32:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4800000000000000]}) 13:32:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getgid() bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_open_dev$sndpcmp(&(0x7f0000000100)='/dev/snd/pcmC#D#p\x00', 0x1, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x40000, 0x0) ioctl$EVIOCSFF(r2, 0x40304580, &(0x7f00000000c0)={0x52, 0x5, 0x0, {0x5387, 0x7}, {0x9, 0x7}, @cond=[{0x1c5, 0x6, 0x4, 0x0, 0x2163b646, 0x4}, {0x8, 0x1eec570d, 0xffff, 0x73, 0x3c, 0x6}]}) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000200)={'team0\x00', 0x0}) ioctl$sock_inet6_SIOCDELRT(r2, 0x890c, &(0x7f0000000240)={@dev={0xfe, 0x80, [], 0x1e}, @remote, @remote, 0x100000001, 0x42, 0xffffffff, 0x100, 0xa8b, 0x800000, r3}) ioctl$SNDRV_TIMER_IOCTL_STOP(r2, 0x54a1) 13:32:11 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2629.073498][ T26] audit: type=1326 audit(1552224731.815:67): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11094 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 13:32:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c00000000000000]}) 13:32:11 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4800000000000000]}) 13:32:11 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:11 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x400000000011, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000037000/0x1000)=nil}) openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x80200, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:12 executing program 1: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000002d80)=[{{&(0x7f0000000a80)=@alg, 0x80, 0x0, 0x0, &(0x7f0000000b00)=""/218, 0xda}}], 0x1, 0x0, &(0x7f0000002e40)) sendmsg$nl_generic(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400000042000501000021eb4e0100000000000000b77def186da2041a"], 0x1}}, 0x0) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x100, 0x0) socket$inet(0x2, 0x0, 0x0) seccomp(0x0, 0x0, 0x0) 13:32:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:12 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6800000000000000]}) 13:32:12 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x4c00000000000000]}) 13:32:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000180)=ANY=[@ANYBLOB="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"]) ioctl$KVM_ASSIGN_PCI_DEVICE(r1, 0x8040ae69, &(0x7f0000000080)={0xffffffffffffff9d, 0x55da, 0x200, 0x1, 0x621}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:12 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x101000, 0x0) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f00000000c0), 0x4) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 2629.822000][ T26] audit: type=1326 audit(1552224732.565:68): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11094 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 13:32:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}]}, 0x2c, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2629.941804][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2629.947636][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:12 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6800000000000000]}) [ 2630.009483][ T26] audit: type=1326 audit(1552224732.745:69): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11731 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 13:32:12 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c00000000000000]}) 13:32:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:12 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="be2b6b"]) r3 = syz_open_dev$vcsn(&(0x7f0000000080)='/dev/vcs#\x00', 0x7ff, 0x509a01) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f00000000c0)={0xffffffffffff7fff, 0x3, 'client1\x00', 0x4, "de8296f3fe2e0ef7", "dc0c1383c845def505ebbab2a35ed2978ad2b6d57dcbe87e424ba5a37b706294", 0x2, 0xffff}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:12 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:13 executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)={0x1, 0x9, 0x1, 0x20000000000001, 0x0, 0x0}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000080)={r0, &(0x7f0000000000), 0x0}, 0x18) 13:32:13 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7400000000000000]}) 13:32:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x2, 0x600) syz_open_pts(r1, 0x100) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0xffffffffffffff14) socket$netlink(0x10, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r2 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000300)='/dev/vfio/vfio\x00', 0x800, 0x0) write$ppp(r2, &(0x7f0000000200)="6f0fe568391069e8e999bc281486bff944d50001eed8987be283c656663428cf0ac08ddbb511cc8ae54da237047dfbd5252e69b81382ce2e2914581c74d76ffae9b8c4ec53617de2bf5dd830f5b0aa1b1fa7457da9fc834caa6433cc74aff57229210481d9cd03778a5db2390777fd671e8ab2d214c676a8547f267f082f8dbca427a09c8689dc3f55f0559b582135e917c85867f94f7c422243c11b95f5c8b1eb300814feb025e6ab15e3111d015e2648b0178c87e1191db5ca6d2e300469a366035e82f81da2d69e6682bdc57e7a945a025f3496318a6f75b417a83d063cba6010ca5de1cc13bcaf1aa00d60848dca877de03c1e", 0xf5) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x2000080006, 0x40000000000fe) setsockopt$X25_QBITINCL(r3, 0x106, 0x1, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$EVIOCGBITSND(r2, 0x80404532, &(0x7f0000000340)=""/48) recvmmsg(r0, &(0x7f0000004580)=[{{&(0x7f0000000d40)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @empty}}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000dc0)=""/225, 0xe1}, {&(0x7f0000000ec0)=""/242, 0xf2}, {&(0x7f0000000fc0)=""/36, 0x24}, {&(0x7f0000001000)=""/35, 0x23}, {&(0x7f0000001040)=""/243, 0xf3}, {&(0x7f0000001140)=""/199, 0xc7}, {&(0x7f0000001240)=""/197, 0xc5}], 0x7}, 0x7}, {{&(0x7f00000013c0)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, 0x80, &(0x7f00000026c0)=[{&(0x7f0000001440)=""/242, 0xf2}, {&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/188, 0xbc}, {&(0x7f0000002600)=""/163, 0xa3}], 0x4, &(0x7f0000002700)=""/152, 0x98}, 0x1}, {{&(0x7f00000027c0)=@hci={0x1f, 0x0}, 0x80, &(0x7f0000003a80)=[{&(0x7f0000002840)=""/158, 0x9e}, {&(0x7f0000002900)=""/103, 0x67}, {&(0x7f0000002980)=""/35, 0x23}, {&(0x7f00000029c0)=""/4096, 0x1000}, {&(0x7f00000039c0)=""/136, 0x88}], 0x5, &(0x7f0000003b00)=""/66, 0x42}, 0x7fff}, {{&(0x7f0000003b80)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c}, 0x80, &(0x7f0000003ec0)=[{&(0x7f0000003c00)=""/148, 0x94}, {&(0x7f0000003cc0)=""/161, 0xa1}, {&(0x7f0000003d80)=""/21, 0x15}, {&(0x7f0000003dc0)=""/203, 0xcb}], 0x4, &(0x7f0000003f00)=""/3, 0x3}, 0x602}, {{&(0x7f0000003f40)=@nfc_llcp, 0x80, &(0x7f0000004100)=[{&(0x7f0000003fc0)=""/118, 0x76}, {&(0x7f0000004040)=""/42, 0x2a}, {&(0x7f0000004080)=""/118, 0x76}], 0x3, &(0x7f0000004140)=""/190, 0xbe}, 0x8001}, {{&(0x7f0000004200)=@nfc_llcp, 0x80, &(0x7f0000004500)=[{&(0x7f0000004280)=""/98, 0x62}, {&(0x7f0000004300)=""/190, 0xbe}, {&(0x7f00000043c0)=""/58, 0x3a}, {&(0x7f0000004400)=""/88, 0x58}, {&(0x7f0000004480)=""/66, 0x42}], 0x5}, 0x7}], 0x6, 0x2000, &(0x7f0000004700)={0x0, 0x1c9c380}) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, r4, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0x4) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f00000003c0), 0x100002d5, &(0x7f0000001fc0)}}], 0x1, 0xfffffffffffffffc) 13:32:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:13 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x6c00000000000000]}) 13:32:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000480)=ANY=[@ANYRES16=r0, @ANYPTR=&(0x7f0000000300)=ANY=[@ANYRESOCT=r0, @ANYBLOB="4c41822e944b722fce3698470337a43774f0ff8a5bee6ba241a1301db070fd83022ca0384b4b7902a5b63389ffafbcec3e79b2120a64b733d73a6cf11360083cd8f2764feea9327408e8d41c1e5a56e7c798a277043eefcd13a35970cac318f81c5cb0ef", @ANYRES16=r1, @ANYRESOCT=0x0, @ANYPTR64, @ANYPTR=&(0x7f0000000280)=ANY=[@ANYPTR64, @ANYRES16=r0, @ANYRESOCT=r0, @ANYPTR64, @ANYPTR], @ANYRES32=r0, @ANYBLOB="c06c98bcf58bd0cefe592e10ef9afa7c16e27548ac1fc0d45eae613ee7fb4a75793a72dcc1c6f4371da5df967935782d80f33cfde5b19c35346fa2de0c6e91f0a365c88356a651a6cc784dde4f547fc70bf2df8b85b658a800837100bc18624fc74ae6b69c1c11169861d6543f5836d4a9f149"], @ANYRES32=r2]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2630.750126][ T26] audit: type=1326 audit(1552224733.485:70): auid=4294967295 uid=0 gid=0 ses=4294967295 subj==unconfined pid=11731 comm="syz-executor.1" exe="/root/syz-executor.1" sig=9 arch=c000003e syscall=228 compat=0 ip=0x45ad8a code=0x0 13:32:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:13 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7400000000000000]}) 13:32:13 executing program 1: r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x0, 0x0) ioctl$UI_SET_PHYS(r0, 0x4008556c, &(0x7f0000000100)='syz1\x00') 13:32:13 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) accept$packet(0xffffffffffffff9c, &(0x7f00000008c0)={0x11, 0x0, 0x0}, &(0x7f0000000900)=0x14) setsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000940)={r1, @rand_addr=0xf7d2, @multicast1}, 0xc) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = syz_open_dev$media(&(0x7f0000000080)='/dev/media#\x00', 0x5d9e, 0xc2100) ioctl$TIOCCBRK(r2, 0x5428) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f0000000200)={0x0, @bt={0x100, 0x1f, 0x1, 0x1, 0xfff8000000000000, 0x7, 0x2, 0x7, 0xfffffffffffffc00, 0x2, 0x61, 0x4, 0x1, 0xda, 0x1}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'veth1_to_team\x00', 0xb100}) msync(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x2) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) mlock(&(0x7f0000ffd000/0x2000)=nil, 0x2000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:13 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a00000000000000]}) 13:32:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:13 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0xfffffe80, 0x30, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:13 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:13 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:13 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x7a00000000000000]}) 13:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x2]}) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:14 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x2]}) 13:32:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="dff469dba128dfdff8709f3a9edbbe3564eb5354d0f8e5e141"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) 13:32:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x3, 0x380) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)={0x4, [0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000100)=0x14) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x3]}) 13:32:14 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x3]}) 13:32:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_GET_REG_LIST(r2, 0xc008aeb0, &(0x7f0000000080)=ANY=[]) socket$nl_xfrm(0x10, 0x3, 0x6) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', 0x0, &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:14 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x200, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000100)={0x0}, &(0x7f0000000200)=0xc) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000240)=0x0) sendmsg$nl_generic(r1, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x14800000}, 0xc, &(0x7f0000000280)={&(0x7f00000004c0)={0x524, 0x1d, 0x20, 0x70bd25, 0x25dfdbfc, {0x5}, [@typed={0x28, 0x94, @binary="58a1d78f42679678ffe12499a04133ef31e9df0960044fe815a0f39e92aad9acfc"}, @nested={0xcc, 0xf, [@generic="c2280aad4b241c447967be5749aa7314bcbab0ada8d1f6d8fda30b05c05b6a0199fa1306e4f3a0e62988148818c03cef5bd70893669ce49929680774862b8800cdabc48e5c778fcaa46d9100dec3a8b669f05d5d43a3c019565584138454bc1220a749363c56763d28bdf4c36fa2e9c484ce2b57526bfbe6858b1a20f5f275ebee99cfcf28fca85e8479050322e26a9fc4d4725ac5d0a4f1e24784956509b1cb88ab318b3078f56d748f8a19c7ef60b69e28ca637a888624e25968ab1b733d8d", @typed={0x8, 0x7e, @fd=r1}]}, @nested={0xcc, 0x34, [@generic="1648975b7f2f08262ef6241f4dca055a623afccfbd66b98c9f6aa0951bf5548b44da8dc08d335fa779baba9ee9f8c445c9d61d99b78cbc55cf827174056e806cbab113dc38e198283bcb0c7bcc5fbf4e54212db56f8e959e993bfadc75cb3ca106654b672b78b08900ffdb40a7cf2941347a9bae59dea8d7125b718fe6917da7cc0c8767b32e5a7f202491e58cdee48a903c9e4520c832742c591ef8318282aca63c630aea17", @typed={0x8, 0xa, @str='\\}\x00'}, @typed={0x8, 0x7d, @fd=r0}, @generic="0c0b43171095b5277bce", @typed={0x8, 0x8a, @fd=r2}]}, @typed={0xc, 0x4b, @u64=0x5}, @nested={0x134, 0x1a, [@generic="69c3b2eceafd3cc2b5b11726b7edc790333e2f1da383f2f73bfe26834bea2323f259b3d2f0c9eba98ebe8db36e1f459a87f9b39f79135df31e327fd0742e4a46f18b374295945aa7825c4bb38eeee2d1d8f7feb898bf51115419d602f1c9", @typed={0xc0, 0x32, @binary="cef7a27dc78878455be1c4b35142f903dd110524ac446732693ddf3bdb983ef6cf54f82f68993b661fdb0aaec22134cbdeb05ea26f3bdbd43f8e5ed4bd883348a4057b32340d266c25dc242369d62e51ec22ab53b1fa94c68bc8bf625564d40adbf6dce724a99e3f94cef3c4d91f0d7b7024ceb4c2ac086df3f8ca3ce855ca9b4c3108aa7df94223c7ea2a1552663a14e87e2bdfaa452aee84b160cf589740b92187c1b7cf27a0682d91bf5b4a6f7741c5d89382c57cc13aebf9"}, @typed={0x8, 0x10, @fd=r0}, @typed={0x8, 0x90, @pid=r3}]}, @typed={0x8, 0x45, @ipv4=@rand_addr=0x8001}, @nested={0x208, 0x18, [@typed={0x8, 0x70, @fd=r1}, @typed={0xc, 0x46, @u64=0x80}, @typed={0x8, 0xf, @pid=r4}, @generic="ff061b62012404b2b5d7ae5c114dfeeb0baf6b8d5b766874341003c04986de3a4857a19e4ead28deb6e9b7329b19cc6f0803e1f019c629cf21967d64d33454b0d5d46d5bf20097d0ff8263b99eb3fa7f1a2e25254b9b91e6a7742f9f7f4dd5e63eeefad1dd55cc", @typed={0x14, 0x9, @ipv6=@ipv4={[], [], @multicast1}}, @generic="c945feff3fca9b673d8c11036d9a3b5bfeb06a7fab9daa4a2d11e462a03bfb34dfbd4cd2e3d699d612776166c80e4826bf772a7b0be173296443284e3710265f8966ffb93c6e4a2d39a703d17394ef635cff94e11de0c4f7daf9475119b73ec9a4859eab1a8edcc9272d0efa44df28c1d892abb8066de7540be08c5cecd98825a3ba0606e81f4e62cbb00813f0af64", @typed={0x4, 0x6f}, @generic="97b85f593834f910a03be0bce4a66945f336ba85882adac33a50f195973a05760ddda19984e159b062a245b463e5a5a46a0823d3ffa783888078bce23f114d96cd99d5c6ced75ce9074d35e5390930d40ebcc5b185258e42ef89b1bb7d7d59a59add006d98153747988bfe433d18796dd6aceae1b668a952f1c4302ec855d166c3fe0f65d9a74666cf46498ac1e0d727795b08b050e21b87a683a14305702ca3b06412c1", @generic="2688dab64c2c2e53648a76607371e42b98e6b4741cbe5863a0cc2b2f1c7d875698ed08645f088a06ad6427b60b6a5d322de00b"]}]}, 0x524}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4]}) 13:32:14 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4]}) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:14 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) shmget$private(0x0, 0x4000, 0x1001, &(0x7f0000029000/0x4000)=nil) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-control\x00', 0xc80, 0x0) ioctl$KVM_SET_REGS(r1, 0x4090ae82, &(0x7f00000003c0)={[0x7, 0x8, 0xfff, 0x5, 0x61cdcac7, 0xb5, 0xca, 0x2, 0xffffffff80000001, 0x6, 0xffffffff, 0x7ff, 0x0, 0x4, 0xffffffff, 0x38c103ef], 0x4000, 0x8200}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000080)='/dev/btrfs-control\x00', 0x200100, 0x0) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100)='TIPCv2\x00') sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8001}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x4c, r5, 0x210, 0x70bd29, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x38, 0x7, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x4}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x10001}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r4, 0xc08c5336, &(0x7f0000000300)={0x10001, 0x5, 0xad8, 'queue0\x00', 0x7fffffff}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2631.941779][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2631.947611][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2631.953418][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2631.959152][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2631.964978][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2631.970721][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2632.021773][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2632.027580][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:14 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x5]}) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:14 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x5]}) 13:32:14 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', 0x0, 0x0, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:14 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x0, &(0x7f0000788000), 0xe24640cea781ecb5) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x800000000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:15 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6]}) 13:32:15 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:15 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6]}) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(0x0, 0x60) 13:32:15 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:15 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7]}) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(0x0, 0x60) 13:32:15 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7]}) 13:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_DEVICE(r1, 0xc00caee0, &(0x7f0000000080)={0x1, 0xffffffffffffffff, 0x1}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:15 executing program 1: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1fd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000000000000, 0x0, 0x0, 0x0, 0x0, 0x7, 0xd72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(0x0, 0x60) 13:32:15 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x48]}) 13:32:15 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:15 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x48]}) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x0) 13:32:15 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:15 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c]}) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x0) 13:32:15 executing program 1: r0 = syz_open_procfs(0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:15 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x3, 0x82000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000100)={'raw\x00', 0x2, [{}, {}]}, 0x48) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) prctl$PR_GET_TID_ADDRESS(0x28, &(0x7f0000000080)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:15 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_netdev_private(r0, 0x89fa, &(0x7f0000001040)="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") sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:15 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c]}) 13:32:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:15 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x0) 13:32:15 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x68]}) 13:32:15 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r1 = socket$rds(0x15, 0x5, 0x0) dup2(r1, r0) 13:32:15 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:16 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x68]}) 13:32:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x40) ioctl$VIDIOC_DBG_G_REGISTER(r3, 0xc0385650, &(0x7f0000000180)={{0x4, @addr=0x6}, 0x8, 0x34, 0x1}) getsockname$netrom(r3, &(0x7f00000000c0)={{}, [@default, @remote, @default, @remote, @remote, @netrom, @null, @netrom]}, &(0x7f0000000140)=0x48) 13:32:16 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c]}) 13:32:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:16 executing program 5: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(0x0, &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:16 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c]}) 13:32:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:16 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x74]}) 13:32:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$KVM_NMI(r1, 0xae9a) creat(&(0x7f0000000080)='./file0\x00', 0x81) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:16 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff80000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="0ee5e1d7f1f13f0df82bae9e6711f9ae6c653b74ad0fc3a789ea075f", 0x1c, 0x5}, {&(0x7f0000000140)="fe66e1fdebc9a5e3ec7b9d0ed582728eda6dbb9091edf480361b8ce95c2850d05d2f9d78e2a6a9650965829532c19d44d80c6a1f8316a46792d88b94a05541d6a19c672cd7ae7c265cc12dfd3d9f6ddb00acbd5aafb00e209e208cf3d99d", 0x5e, 0x9}, {&(0x7f00000001c0)="e5608cfde7cc0c292c1a8daed9847451b05c407fea213ba70a69567284d3f8ae95b3340377ffa2359a8389e6a7d28f890d1794f2483876f43c3bbd798a08558618f21e283d139bfee65e5e0be073e4bb908ad19cbc1e75c29ae1dcf4ff283932c36c1c2612f35d89e43c19e7363a6f3e665602548bd5c64c5ee202d7ab2c89cf501611c13a55cd655c13fc499b977961930dd5902639f323d47b5879e29c52fa9a711ada0cbd0b66c64ab1bc4ab012eed7bd7c0640fc0839db5836c6107403a20a60e96d0d02a7469f48c53f4ff2e73e921d85589453806a31716305a64315fe", 0xe0, 0x4}, {&(0x7f0000000300)="a71896e3b735a45df708c4368cae8d97c3bc595c842156bde826c90305f9cf9b3e54377099212d60c1805c1f965bfdf5b99cbb165ed2d90de60eb0d8f478e144edceba62eb0fb07fa93a7c7ce855152f50333c744902bffa9c1d3a57525b0f61", 0x60, 0x28}], 0x211800, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nodiscard='nodiscard'}, {@dioread_nolock='dioread_nolock'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80000001, @null, @rose={'rose', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:16 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x74]}) 13:32:16 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r0, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r0, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:16 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:16 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a]}) 13:32:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0f2b696f0be384e09e86d2834b6a7694a9863b36c4fe288923dd49d37a247a877b2026e2e32fc16850a618c2565ccfb5df55e62e5f7eca16c35a19a9814cee55f2c6ebb0bbabee184d812eed7b9ad66e42d06e8fa199e60ae7b6519ab1a7a71e959c6ebf091756fb1ef1ab9706429bdc4e401e3a719062227ed7c727c6e79a9f1f4787764c9aa8ed71e89b2daa0b03bbaae3c7b1ea4e98903c2d0896635cd0ee22341dc9097ad3199cc577c5062093a27da1388aa79620116617fa5758105d9d6f717a"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:16 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:16 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a]}) 13:32:16 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) setsockopt$llc_int(r1, 0x10c, 0x2, &(0x7f0000000080)=0x5c, 0x4) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_LINK_STATS(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x22014008}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x28, r2, 0x101, 0x70bd2b, 0x25dfdbff, {{}, 0x0, 0xb, 0x0, {0xc, 0x14, 'syz1\x00'}}, ["", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x800) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:16 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:16 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x300]}) 13:32:16 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_mount_image$msdos(&(0x7f0000000340)='msdos\x00', &(0x7f0000000280)='./file0\x00', 0xe800, 0x1, &(0x7f0000000180)=[{&(0x7f0000000000)="eb3c906d6b66732e66617400020401000200027400f8", 0x16}], 0x0, 0x0) r3 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) ioctl$sock_SIOCOUTQ(r3, 0x5411, 0x0) getsockopt$EBT_SO_GET_INIT_ENTRIES(0xffffffffffffffff, 0x0, 0x83, 0x0, &(0x7f0000000780)) fchdir(r3) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000001c0)={@ipv4={[], [], @multicast1}, 0xfffffffffffffff7, 0x3, 0xff, 0xa, 0x0, 0x770}, 0x20) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$IMGETVERSION(0xffffffffffffffff, 0x80044942, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ioctl$DRM_IOCTL_ADD_MAP(0xffffffffffffffff, 0xc0286415, 0x0) setsockopt$inet_buf(r3, 0x0, 0x0, &(0x7f0000000600)="3047b5b0ead3761cd4872c5a4fd00a06c32120260d863ee72de9b9abe382ab36ff3abc1174e0e55b2d10f9e3f94ff9d30eef983c6fc330bb234633e370148d02d15ef5983083d8", 0x47) r4 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0xfffffffffffffffe) r5 = open$dir(&(0x7f00000003c0)='./file0\x00', 0x0, 0x0) write(r4, &(0x7f0000000400)="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", 0x200) sendfile(r4, r5, 0x0, 0x10000) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0adc1f023c123f3188a0") ioctl$VHOST_SET_VRING_KICK(r3, 0x4008af20, &(0x7f0000000200)={0x0, r3}) syz_open_dev$vcsn(0x0, 0x0, 0x2000) r6 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r7 = getpid() ptrace$poke(0x5, r7, &(0x7f0000000240), 0x8) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) [ 2634.379106][ T26] audit: type=1800 audit(1552224737.115:71): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="file0" dev="sda1" ino=16970 res=0 13:32:17 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff80000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="0ee5e1d7f1f13f0df82bae9e6711f9ae6c653b74ad0fc3a789ea075f", 0x1c, 0x5}, {&(0x7f0000000140)="fe66e1fdebc9a5e3ec7b9d0ed582728eda6dbb9091edf480361b8ce95c2850d05d2f9d78e2a6a9650965829532c19d44d80c6a1f8316a46792d88b94a05541d6a19c672cd7ae7c265cc12dfd3d9f6ddb00acbd5aafb00e209e208cf3d99d", 0x5e, 0x9}, {&(0x7f00000001c0)="e5608cfde7cc0c292c1a8daed9847451b05c407fea213ba70a69567284d3f8ae95b3340377ffa2359a8389e6a7d28f890d1794f2483876f43c3bbd798a08558618f21e283d139bfee65e5e0be073e4bb908ad19cbc1e75c29ae1dcf4ff283932c36c1c2612f35d89e43c19e7363a6f3e665602548bd5c64c5ee202d7ab2c89cf501611c13a55cd655c13fc499b977961930dd5902639f323d47b5879e29c52fa9a711ada0cbd0b66c64ab1bc4ab012eed7bd7c0640fc0839db5836c6107403a20a60e96d0d02a7469f48c53f4ff2e73e921d85589453806a31716305a64315fe", 0xe0, 0x4}, {&(0x7f0000000300)="a71896e3b735a45df708c4368cae8d97c3bc595c842156bde826c90305f9cf9b3e54377099212d60c1805c1f965bfdf5b99cbb165ed2d90de60eb0d8f478e144edceba62eb0fb07fa93a7c7ce855152f50333c744902bffa9c1d3a57525b0f61", 0x60, 0x28}], 0x211800, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nodiscard='nodiscard'}, {@dioread_nolock='dioread_nolock'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80000001, @null, @rose={'rose', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:17 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x300]}) 13:32:17 executing program 1: syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:17 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x500]}) [ 2634.516400][ T26] audit: type=1804 audit(1552224737.115:72): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949054952/syzkaller.MrJNrV/3302/file0/file0" dev="sda1" ino=16970 res=1 13:32:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) recvmmsg(r0, &(0x7f0000004700)=[{{&(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000100)=""/4, 0x4}, {&(0x7f0000000200)=""/12, 0xc}], 0x2, &(0x7f0000000280)=""/120, 0x78}, 0x1}, {{&(0x7f0000000300)=@alg, 0x80, &(0x7f0000000980)=[{&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000400)=""/72, 0x48}, {&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/171, 0xab}, {&(0x7f0000000580)=""/240, 0xf0}, {&(0x7f0000000680)=""/24, 0x18}, {&(0x7f00000006c0)=""/213, 0xd5}, {&(0x7f00000007c0)=""/149, 0x95}, {&(0x7f0000000880)=""/207, 0xcf}], 0x9, &(0x7f0000000a40)=""/244, 0xf4}, 0x9}, {{&(0x7f0000000b40)=@tipc=@name, 0x80, &(0x7f0000000e40)=[{&(0x7f0000000bc0)=""/100, 0x64}, {&(0x7f0000000c40)=""/74, 0x4a}, {&(0x7f0000000cc0)=""/94, 0x5e}, {&(0x7f0000000d40)=""/183, 0xb7}, {&(0x7f0000000e00)=""/3, 0x3}], 0x5}, 0x40000000000}, {{0x0, 0x0, &(0x7f0000004280)=[{&(0x7f0000000ec0)=""/22, 0x16}, {&(0x7f0000000f00)=""/155, 0x9b}, {&(0x7f0000002040)=""/168, 0xa8}, {&(0x7f0000000fc0)}, {&(0x7f0000002100)=""/4096, 0x1000}, {&(0x7f0000003100)=""/181, 0xb5}, {&(0x7f00000031c0)=""/4096, 0x1000}, {&(0x7f00000041c0)=""/175, 0xaf}], 0x8}, 0x91}, {{&(0x7f0000004300)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, 0x80, &(0x7f0000004400)=[{&(0x7f0000004380)=""/77, 0x4d}], 0x1, &(0x7f0000004440)=""/22, 0x16}, 0x400}, {{&(0x7f0000004480)=@xdp, 0x80, &(0x7f00000046c0)=[{&(0x7f0000004500)=""/143, 0x8f}, {&(0x7f00000045c0)=""/23, 0x17}, {&(0x7f0000004600)=""/130, 0x82}], 0x3}, 0xfffffffffffffffa}], 0x6, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000004900)=0x0) perf_event_open(&(0x7f0000004880)={0x0, 0x70, 0x5, 0x8000, 0x1, 0x2, 0x0, 0x2f, 0x1014, 0x1, 0x7fffffff, 0x3, 0x0, 0xfffffffffffffe00, 0x5, 0x7, 0x6, 0x7, 0x47, 0x4, 0x2, 0x7fffffff, 0x600000000000, 0x0, 0x8, 0x40, 0x7, 0x6, 0xb67, 0x0, 0xfff, 0x4, 0x4, 0x1, 0x20, 0x9, 0x5, 0xb8, 0x0, 0x2, 0x3, @perf_bp={&(0x7f0000000fc0), 0x6}, 0x19200, 0x80000001, 0x4, 0x0, 0x40, 0x34a, 0x3}, r2, 0x3, r1, 0x8) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x0) 13:32:17 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x500]}) 13:32:17 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x600]}) 13:32:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x0) 13:32:17 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) [ 2634.981063][ T26] audit: type=1804 audit(1552224737.715:73): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949054952/syzkaller.MrJNrV/3302/file0/file0" dev="sda1" ino=16970 res=1 13:32:17 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x0) [ 2635.076863][ T26] audit: type=1804 audit(1552224737.745:74): pid=16747 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir949054952/syzkaller.MrJNrV/3302/file0/file0" dev="sda1" ino=16970 res=1 13:32:17 executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x6, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4}, [@alu={0x4, 0x1, 0x1, 0x4, 0x0, 0x38, 0x10}, @call={0x85, 0x0, 0x0, 0x3b}]}, &(0x7f0000000540)='GPL\x00', 0x4, 0x6c, &(0x7f0000000580)=""/108, 0x41f00, 0x1, [], 0x0, 0x8}, 0x48) fcntl$setpipe(r0, 0x407, 0x6) r1 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x6de1, 0x840) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f00000000c0)=""/200, 0x0, 0x1000, 0x3}, 0x18) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000500), &(0x7f0000000300)=0x4) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000680)={0x0, 0x7ff}) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r1, 0xc0385720, &(0x7f00000004c0)={0x1, {}, 0x10000, 0x20}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f000001b000/0x18000)=nil, &(0x7f0000000240)=[@text16={0x10, &(0x7f0000000200)="0f3266f836dfd7660faeb600000f00d465260f013d26660f3841460c0f01df0f0f4b0fb666b94b0200000f32", 0x2c}], 0x1, 0x4, &(0x7f0000000280), 0x0) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(r3, 0xffffffffffffffff, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x4, 0x0, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380)='TIPCv2\x00') sendmsg$TIPC_NL_BEARER_GET(r1, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4200}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="05000000", @ANYRES16=r4, @ANYBLOB="00012cbd7000fedbdf25040000003000020008000100070000000400040004000400080002000000000004000400080002000900000008000100040000002400090008000200dc0700000800010001000000080001000080000008000200cbcd0000"], 0x68}, 0x1, 0x0, 0x0, 0x1}, 0x24040000) socket$xdp(0x2c, 0x3, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 13:32:18 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) write$P9_RREAD(0xffffffffffffffff, 0x0, 0x0) r2 = fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0xd00000000000000, &(0x7f0000000000)={0x6, 0x4, 0x20000000007ffd, 0x7c, 0x0, 0x1, 0x0, [0x0, 0x0, 0x0, 0x400100]}, 0x2c) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) stat(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f00000000c0)='./file0\x00', 0xffffffff80000000, 0x4, &(0x7f0000000380)=[{&(0x7f0000000100)="0ee5e1d7f1f13f0df82bae9e6711f9ae6c653b74ad0fc3a789ea075f", 0x1c, 0x5}, {&(0x7f0000000140)="fe66e1fdebc9a5e3ec7b9d0ed582728eda6dbb9091edf480361b8ce95c2850d05d2f9d78e2a6a9650965829532c19d44d80c6a1f8316a46792d88b94a05541d6a19c672cd7ae7c265cc12dfd3d9f6ddb00acbd5aafb00e209e208cf3d99d", 0x5e, 0x9}, {&(0x7f00000001c0)="e5608cfde7cc0c292c1a8daed9847451b05c407fea213ba70a69567284d3f8ae95b3340377ffa2359a8389e6a7d28f890d1794f2483876f43c3bbd798a08558618f21e283d139bfee65e5e0be073e4bb908ad19cbc1e75c29ae1dcf4ff283932c36c1c2612f35d89e43c19e7363a6f3e665602548bd5c64c5ee202d7ab2c89cf501611c13a55cd655c13fc499b977961930dd5902639f323d47b5879e29c52fa9a711ada0cbd0b66c64ab1bc4ab012eed7bd7c0640fc0839db5836c6107403a20a60e96d0d02a7469f48c53f4ff2e73e921d85589453806a31716305a64315fe", 0xe0, 0x4}, {&(0x7f0000000300)="a71896e3b735a45df708c4368cae8d97c3bc595c842156bde826c90305f9cf9b3e54377099212d60c1805c1f965bfdf5b99cbb165ed2d90de60eb0d8f478e144edceba62eb0fb07fa93a7c7ce855152f50333c744902bffa9c1d3a57525b0f61", 0x60, 0x28}], 0x211800, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x20}}, {@nodiscard='nodiscard'}, {@dioread_nolock='dioread_nolock'}], [{@smackfsfloor={'smackfsfloor', 0x3d, '/dev/kvm\x00'}}, {@pcr={'pcr', 0x3d, 0xf}}, {@obj_user={'obj_user', 0x3d, '/dev/kvm\x00'}}, {@uid_eq={'uid', 0x3d, r4}}, {@euid_eq={'euid', 0x3d, r5}}, {@subj_type={'subj_type', 0x3d, '/dev/kvm\x00'}}]}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000680)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x80000001, @null, @rose={'rose', 0x0}, 0x3, [@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x600]}) 13:32:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x700]}) 13:32:18 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = getpgid(0x0) capset(&(0x7f0000000100)={0x19980330, r1}, &(0x7f0000000200)={0x8045, 0x1, 0x7, 0x4, 0x22b, 0xe30}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$bt_rfcomm_RFCOMM_LM(r2, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = dup3(r0, r0, 0x80000) read$alg(r1, &(0x7f00000000c0)=""/113, 0x71) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r2 = syz_open_dev$vbi(&(0x7f0000000080)='/dev/vbi#\x00', 0x3, 0x2) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, r2, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x700]}) 13:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4800]}) 13:32:18 executing program 1: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vsock\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000180)={0x3f, 0x0, 0x2, 0x10001}) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f00000001c0)={0x3, r3, 0x10001, 0x3f2}) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f0000000100)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e23, 0x0, @local, 0x8}, @in6={0xa, 0x4e21, 0x92, @rand_addr="37abd04791da538392f7f486df49b453", 0x4}, @in6={0xa, 0x4e22, 0x8000, @local, 0x100000001}], 0x64) read(r0, &(0x7f0000000300)=""/228, 0xe4) getsockopt$sock_linger(r2, 0x1, 0xd, &(0x7f00000000c0), &(0x7f0000000240)=0x8) 13:32:18 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x1) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xffffffffffffff17) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r2, 0xc0bc5351, &(0x7f0000000200)={0x81, 0x1, 'client0\x00', 0x4, "0ce8602b440b792d", "b0aee764ca616a239b1131728a94a89339ea3ac030cce0a7fe98afc87f85bc4a", 0x40, 0xfffffffffffffff7}) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x0, &(0x7f00000002c0)}}], 0x1, 0x0) pipe2(&(0x7f0000000080)={0xffffffffffffffff}, 0x4800) fsetxattr$security_ima(r3, &(0x7f00000002c0)='security.ima\x00', &(0x7f0000000300)=@v2={0x5, 0x3, 0xc, 0x8, 0x4d, "38f5d0eac91e9d562cf30bacadccd2d82a6b55ef46368a15e6e2049e7b70cb4aae2cf16ed06f5cbbbc523318ece0533953aca6011f10f9d6d0c445918ac1e9e4cc2de603fbb916d5893a61f6e6"}, 0x57, 0x3) ioctl$TUNSETQUEUE(r3, 0x400454d9, &(0x7f00000000c0)={'rose0\x00', 0x400}) 13:32:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4800]}) [ 2635.678331][T18090] Unknown ioctl -1071619020 13:32:18 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r0, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) [ 2635.734668][T18199] Unknown ioctl -1071619020 13:32:18 executing program 5: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f00000000c0)={0xffffffffffffff9c}) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffff9c, 0x84, 0x76, &(0x7f0000000100)={0x0, 0xdd3a}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f0000000180)={r3, 0xffffffffffffff00}, &(0x7f00000001c0)=0x8) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) read(r0, &(0x7f0000000300)=""/228, 0xe4) 13:32:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c00]}) 13:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000080)="ff", 0x1}], 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) vmsplice(r4, &(0x7f0000000880)=[{&(0x7f0000000600)="b040b303867aabf1b0831bf10d57a15a0713335fb85c8506c5008949023d5011476eb65e7b55737423c13da8befb224f643d52676518e3e3666c97861ae183", 0x3f}], 0x1, 0x0) r6 = accept4$alg(r5, 0x0, 0x0, 0x0) splice(r3, 0x0, r6, 0x0, 0x20000000003, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c00]}) [ 2635.861843][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.867626][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2635.873437][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2635.879182][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:18 executing program 4: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000200}, 0xc, &(0x7f0000000100)={&(0x7f0000000880)=ANY=[@ANYBLOB="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"], 0x35c}, 0x1, 0x0, 0x0, 0x10}, 0x80) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000240)={0x0, 0x5}, &(0x7f0000000280)=0x8) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f00000002c0)={r2, 0x9}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r2, 0x10000}, &(0x7f00000003c0)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000001000)={r2, 0x10000, 0xa, 0x5}, 0x53) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r4 = socket(0x11, 0x80002, 0x0) getpeername$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000440)=0x14) sendmsg$xdp(r0, &(0x7f0000000700)={&(0x7f00000004c0)={0x2c, 0x1, r5, 0x2b}, 0x10, &(0x7f00000006c0)=[{&(0x7f0000000500)="2252965190feb35a2f976ed73a7ee5d00cd3afabd0dfa1a44af62cc8357c1cf24ba4050c7d220f2a6161a6a1137ed7f764977a972d84c020b34dcba154abd57f3d7b90f24aa2f8bfc4cc5376b91f161c0997d32dab5a59b7b9819f5402484351546eab293970441091466dfa35d8fdea9a5f3f3e8aa49a17c05bd28d7cd739fb525f41cc7e18ae80b9024a92587586890e82a362033d6c2d678b42bc5e40cbcfb1a51679bd6ed6911a8e08858accd17c11a5574840851e8b018c2e1877cbf3aba431604971f5bfeb21074aa8e3b109753f76b95e264af26353d493acfc6655d7fd28ba5615ec3e0bd2f7883668373aa6636da1671a1947d4110ae0", 0xfb}, {&(0x7f0000000600)="d8a3c2dfb2c20f2f91277826220c936c630f1b2cdc5b793a13ed5866ca6fe7398b3f4d6e65e1a1d469fd6ac1293dbd98e431ba5a4e7fa3cb5d4b9d938071e2beb6189df3721edf8990fe25abdaa170b178161178adb34c20065ccf5ae77e868c3798e8c179795aa0b370b91ca379e596784734a7adf158fd73967d96472f237f08", 0x81}], 0x2, 0x0, 0x0, 0x4000840}, 0x804) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000788000)=0x1, 0x4) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000800)={r0, 0x28, &(0x7f00000007c0)={0x0, 0x0}}, 0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000c40)={r2, 0x10000, 0x6}, &(0x7f0000000c80)=0x8) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000840)={r6, 0x7f}, 0xc) r7 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x0, 0x2) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000340)='/dev/sequencer2\x00', 0x80, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) getpeername$tipc(r7, &(0x7f0000000cc0), &(0x7f0000000d00)=0x10) sendmmsg(r1, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r4, 0x84, 0x11, &(0x7f0000000740)={r3, 0x6eaf}, &(0x7f0000000780)=0x8) 13:32:18 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6800]}) 13:32:18 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6800]}) 13:32:18 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040)='/dev/nullb0\x00', 0x0, 0x0) r3 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x20, 0x10000) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000100)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r3, &(0x7f0000000180)={0x1, 0x10, 0xfa00, {&(0x7f00000000c0), r4}}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2636.101803][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2636.107586][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2636.113431][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2636.119180][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2636.125025][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2636.130773][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2637.701971][ T9111] Bluetooth: hci0: command 0x1003 tx timeout [ 2637.708112][ T1172] Bluetooth: hci0: sending frame failed (-49) [ 2637.941797][T11029] Bluetooth: hci1: command 0x1003 tx timeout [ 2637.947943][ T1172] Bluetooth: hci1: sending frame failed (-49) [ 2639.781828][T11029] Bluetooth: hci0: command 0x1001 tx timeout [ 2639.787970][ T1172] Bluetooth: hci0: sending frame failed (-49) [ 2640.021841][T11029] Bluetooth: hci1: command 0x1001 tx timeout [ 2640.027901][ T1172] Bluetooth: hci1: sending frame failed (-49) [ 2641.861826][ T9111] Bluetooth: hci0: command 0x1009 tx timeout [ 2642.102039][ T9111] Bluetooth: hci1: command 0x1009 tx timeout 13:32:29 executing program 1 (fault-call:5 fault-nth:0): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:29 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c00]}) 13:32:29 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c00]}) 13:32:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0xfffffffffffffd62) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f0000000080)={0x7, @sliced={0x100000001, [0x5, 0x8fe5, 0x800, 0x63ff868a, 0x3, 0x5, 0x7ff, 0xfffffffffffffffa, 0x2, 0x9, 0x81, 0x8000, 0x0, 0x6, 0x80000000, 0xff, 0x7, 0x1000, 0x1f, 0x400, 0xffffffffffffff43, 0x9, 0x7, 0x9ee5, 0x7, 0x81, 0x0, 0x9, 0x5, 0x2, 0x4, 0x4, 0x1f, 0x9b1, 0x90b, 0x9, 0x7, 0x96, 0x1, 0x63d8831a, 0x8, 0xfffffffffffffff8, 0x10000, 0xfff, 0x1, 0x9, 0x1, 0x5], 0x100000000}}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:29 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) [ 2646.367280][T18973] FAULT_INJECTION: forcing a failure. [ 2646.367280][T18973] name failslab, interval 1, probability 0, space 0, times 0 13:32:29 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7400]}) [ 2646.423236][T19008] FAULT_INJECTION: forcing a failure. [ 2646.423236][T19008] name failslab, interval 1, probability 0, space 0, times 0 13:32:29 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="0f2bafee41c76937c1655d65c4c40101365a51c5b073818b4d450e91194d6691c88212d3"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:29 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7400]}) [ 2646.483328][T19008] CPU: 1 PID: 19008 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2646.490986][T19008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.501033][T19008] Call Trace: [ 2646.504330][T19008] dump_stack+0x172/0x1f0 [ 2646.508689][T19008] should_fail.cold+0xa/0x15 [ 2646.513283][T19008] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2646.519103][T19008] ? ___might_sleep+0x163/0x280 [ 2646.523957][T19008] __should_failslab+0x121/0x190 [ 2646.523978][T19008] should_failslab+0x9/0x14 [ 2646.523995][T19008] kmem_cache_alloc+0x2b2/0x6f0 [ 2646.524016][T19008] ? wait_for_completion+0x440/0x440 [ 2646.524034][T19008] getname_flags+0xd6/0x5b0 [ 2646.524051][T19008] user_path_at_empty+0x2f/0x50 [ 2646.524068][T19008] do_fchmodat+0x9c/0x150 [ 2646.524083][T19008] ? __ia32_sys_fchmod+0x80/0x80 [ 2646.524104][T19008] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2646.524120][T19008] ? do_syscall_64+0x26/0x610 [ 2646.524135][T19008] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.524149][T19008] ? do_syscall_64+0x26/0x610 [ 2646.524163][T19008] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2646.524181][T19008] __x64_sys_chmod+0x5c/0x80 [ 2646.524198][T19008] do_syscall_64+0x103/0x610 [ 2646.524216][T19008] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.524228][T19008] RIP: 0033:0x457f29 [ 2646.524242][T19008] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2646.524250][T19008] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2646.524264][T19008] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2646.524273][T19008] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000020000180 [ 2646.524280][T19008] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2646.524293][T19008] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2646.533685][T19008] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000003 [ 2646.590890][T18973] CPU: 0 PID: 18973 Comm: syz-executor.5 Not tainted 5.0.0+ #15 [ 2646.598118][T18973] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2646.598123][T18973] Call Trace: [ 2646.598142][T18973] dump_stack+0x172/0x1f0 [ 2646.598161][T18973] should_fail.cold+0xa/0x15 [ 2646.598181][T18973] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2646.711063][T18973] ? ___might_sleep+0x163/0x280 [ 2646.715895][T18973] __should_failslab+0x121/0x190 [ 2646.720812][T18973] should_failslab+0x9/0x14 [ 2646.725293][T18973] kmem_cache_alloc_trace+0x2d1/0x760 [ 2646.730653][T18973] ? kasan_check_read+0x11/0x20 [ 2646.735486][T18973] alloc_pipe_info+0xb9/0x430 [ 2646.740142][T18973] splice_direct_to_actor+0x775/0x970 [ 2646.745495][T18973] ? common_file_perm+0x238/0x720 [ 2646.750502][T18973] ? generic_pipe_buf_nosteal+0x10/0x10 [ 2646.756028][T18973] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2646.762244][T18973] ? do_splice_to+0x190/0x190 [ 2646.766901][T18973] ? rw_verify_area+0x118/0x360 [ 2646.771738][T18973] do_splice_direct+0x1da/0x2a0 [ 2646.776577][T18973] ? splice_direct_to_actor+0x970/0x970 [ 2646.782106][T18973] ? rw_verify_area+0x118/0x360 [ 2646.786935][T18973] do_sendfile+0x597/0xd00 [ 2646.791345][T18973] ? do_compat_pwritev64+0x1c0/0x1c0 [ 2646.796612][T18973] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2646.802829][T18973] ? fput+0x1b/0x20 [ 2646.806617][T18973] __x64_sys_sendfile64+0x1dd/0x220 [ 2646.811795][T18973] ? __ia32_sys_sendfile+0x230/0x230 [ 2646.817057][T18973] ? do_syscall_64+0x26/0x610 [ 2646.821716][T18973] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2646.826986][T18973] ? trace_hardirqs_on+0x67/0x230 [ 2646.831988][T18973] do_syscall_64+0x103/0x610 [ 2646.836559][T18973] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2646.842430][T18973] RIP: 0033:0x457f29 [ 2646.846314][T18973] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2646.865895][T18973] RSP: 002b:00007f1948126c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 2646.874279][T18973] RAX: ffffffffffffffda RBX: 00007f1948126c90 RCX: 0000000000457f29 13:32:29 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x0, 0x3, 0x2) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00), 0x0, 0x0) [ 2646.882235][T18973] RDX: 0000000000000000 RSI: 0000000000000003 RDI: 0000000000000004 [ 2646.890182][T18973] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2646.898129][T18973] R10: 010000007ffffffc R11: 0000000000000246 R12: 00007f19481276d4 [ 2646.906079][T18973] R13: 00000000004c4ece R14: 00000000004d8bf8 R15: 0000000000000005 13:32:29 executing program 1 (fault-call:5 fault-nth:1): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:29 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) [ 2647.079394][T19435] FAULT_INJECTION: forcing a failure. [ 2647.079394][T19435] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2647.092602][T19435] CPU: 0 PID: 19435 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2647.100206][T19435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.110238][T19435] Call Trace: [ 2647.113513][T19435] dump_stack+0x172/0x1f0 [ 2647.117831][T19435] should_fail.cold+0xa/0x15 [ 2647.122403][T19435] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2647.128187][T19435] ? __lock_acquire+0x548/0x3fb0 [ 2647.133110][T19435] should_fail_alloc_page+0x50/0x60 [ 2647.138299][T19435] __alloc_pages_nodemask+0x1a1/0x7e0 [ 2647.143652][T19435] ? __alloc_pages_slowpath+0x28b0/0x28b0 [ 2647.149347][T19435] ? find_held_lock+0x35/0x130 [ 2647.154095][T19435] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2647.159880][T19435] cache_grow_begin+0x9c/0x860 [ 2647.164625][T19435] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2647.170847][T19435] kmem_cache_alloc+0x62d/0x6f0 [ 2647.176033][T19435] getname_flags+0xd6/0x5b0 [ 2647.180518][T19435] user_path_at_empty+0x2f/0x50 [ 2647.185355][T19435] do_fchmodat+0x9c/0x150 [ 2647.189664][T19435] ? __ia32_sys_fchmod+0x80/0x80 [ 2647.194582][T19435] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2647.200024][T19435] ? do_syscall_64+0x26/0x610 [ 2647.204697][T19435] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.210739][T19435] ? do_syscall_64+0x26/0x610 [ 2647.215395][T19435] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2647.220659][T19435] __x64_sys_chmod+0x5c/0x80 [ 2647.225229][T19435] do_syscall_64+0x103/0x610 [ 2647.229797][T19435] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.235664][T19435] RIP: 0033:0x457f29 [ 2647.239560][T19435] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2647.259153][T19435] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2647.267548][T19435] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:32:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a00]}) 13:32:30 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a00]}) [ 2647.275503][T19435] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000020000180 [ 2647.283464][T19435] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2647.291430][T19435] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2647.299377][T19435] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000003 13:32:30 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) r1 = open(&(0x7f0000000080)='./file0\x00', 0x248000, 0x9f) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f00000000c0)=0x0) mq_notify(r1, &(0x7f0000000100)={0x0, 0xf, 0x5, @tid=r2}) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:30 executing program 1 (fault-call:5 fault-nth:2): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x1000000]}) 13:32:30 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x1000000]}) [ 2647.446849][T19839] FAULT_INJECTION: forcing a failure. [ 2647.446849][T19839] name failslab, interval 1, probability 0, space 0, times 0 13:32:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r3 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xfff, 0x32002) ioctl$UFFDIO_COPY(r3, 0xc028aa03, &(0x7f00000000c0)={&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, 0x1000, 0x1}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) [ 2647.513364][T19839] CPU: 0 PID: 19839 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2647.520984][T19839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2647.531012][T19839] Call Trace: [ 2647.534285][T19839] dump_stack+0x172/0x1f0 [ 2647.538594][T19839] should_fail.cold+0xa/0x15 [ 2647.543162][T19839] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2647.548957][T19839] ? ___might_sleep+0x163/0x280 [ 2647.553831][T19839] __should_failslab+0x121/0x190 [ 2647.558752][T19839] should_failslab+0x9/0x14 [ 2647.563231][T19839] __kmalloc_track_caller+0x2d8/0x740 [ 2647.568594][T19839] ? lock_downgrade+0x880/0x880 [ 2647.573418][T19839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.579629][T19839] ? posix_acl_clone+0x61/0xe0 [ 2647.584365][T19839] kmemdup+0x27/0x60 [ 2647.588232][T19839] posix_acl_clone+0x61/0xe0 [ 2647.592807][T19839] __posix_acl_chmod+0x49/0x3d0 [ 2647.597628][T19839] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2647.603840][T19839] ? get_acl+0x1b9/0x290 [ 2647.608054][T19839] posix_acl_chmod+0x18c/0x2f0 [ 2647.612790][T19839] ? posix_acl_xattr_set+0x140/0x140 [ 2647.618047][T19839] ? rcu_read_lock_sched_held+0x110/0x130 [ 2647.623736][T19839] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2647.629435][T19839] ? __mark_inode_dirty+0x241/0x1290 [ 2647.634696][T19839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.641018][T19839] ext4_setattr+0xfaa/0x2450 [ 2647.645589][T19839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.651804][T19839] ? evm_verify_current_integrity+0x8c/0xf0 [ 2647.657667][T19839] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2647.663884][T19839] ? evm_inode_setattr+0x70/0x170 [ 2647.668880][T19839] ? ext4_journalled_write_end+0x11b0/0x11b0 [ 2647.674840][T19839] notify_change+0xad9/0xfb0 [ 2647.679405][T19839] ? audit_add_tree_rule+0x560/0xbc0 [ 2647.684663][T19839] chmod_common+0x217/0x460 [ 2647.689161][T19839] ? perf_trace_cma_release+0x420/0x4c0 [ 2647.694692][T19839] ? vfs_fallocate+0xa50/0xa50 [ 2647.699432][T19839] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2647.705644][T19839] ? strncpy_from_user+0x2a8/0x380 [ 2647.710733][T19839] do_fchmodat+0xbe/0x150 [ 2647.715081][T19839] ? __ia32_sys_fchmod+0x80/0x80 [ 2647.719997][T19839] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2647.725429][T19839] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.731468][T19839] ? do_syscall_64+0x26/0x610 [ 2647.736117][T19839] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2647.741387][T19839] __x64_sys_chmod+0x5c/0x80 [ 2647.745953][T19839] do_syscall_64+0x103/0x610 [ 2647.750518][T19839] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2647.756381][T19839] RIP: 0033:0x457f29 [ 2647.760253][T19839] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2647.779830][T19839] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2647.788213][T19839] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2647.796167][T19839] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000020000180 [ 2647.804113][T19839] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:32:30 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000040)=0xffffffffffffff3d, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) [ 2647.812057][T19839] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2647.819999][T19839] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000003 13:32:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x2000000]}) 13:32:30 executing program 1 (fault-call:5 fault-nth:3): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:30 executing program 4: seccomp(0x0, 0x1, &(0x7f00000002c0)={0x3, &(0x7f0000000280)=[{0x0, 0x9, 0x0, 0x7febd26c}, {0x38f, 0x7f, 0xffffffffffffffc1, 0x9}, {0x8, 0x4, 0x2, 0x1}]}) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x2, @loopback}, 0x10) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x1, 0x200000) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$int_out(r1, 0x5460, &(0x7f0000000240)) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) ioctl$BLKFRASET(r1, 0x1264, &(0x7f0000000340)=0x7cf6b69) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) bind$packet(r2, &(0x7f0000000140)={0x11, 0x17, r3}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:30 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x2000000]}) 13:32:30 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ustat(0x300000000000000, &(0x7f0000000080)) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:30 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x7, 0x40) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000080)=0xfba) r1 = syz_open_procfs(0x0, &(0x7f0000000300)='fdinfo/4\x00') setsockopt(r0, 0xfff, 0x101, &(0x7f00000000c0)="b847587d50a1d8c57ce09c77a73eeba39c6fe295f2a751cfbc67f58992252135d438f778e99a532aa9b528c8c59710ac5d94230079bdd13e55e18dbd093b42d8ac1a7e15e9683c7476205a9795e55ae5f7b543cd518b02d7b69beb84259836d8aad0ad23f54c5692a3fc9e88ce59741d41c1dedd22ee564e26e4f47fa904498118d4c594d23c90129c5dca8277d4e3d2931faab76ad1cfd5ba0b2d7246e584292aa30fb2fece2fa81130af4cf432103811bc20c63cc8e548d95e574120f02a824e7ca4aefe37993f383af34442fbe5cd5d5464e5a75256aed90bb5d067dc3bddf926574d654e6b1d927e50", 0xeb) write$binfmt_elf32(r1, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x3, 0x800, 0x1, 0x4, 0x2, 0x3, 0x8001, 0x1f6, 0x38, 0x311, 0xe0f, 0x4, 0x20, 0x2, 0x7ff, 0x0, 0x6}, [{0x70000002, 0xfffffffffffffffd, 0x5, 0x3, 0xf3, 0xff, 0xec39, 0x7}], "1a77b120bc5fcafd505ae84f6045292d849515613f74b315d567bdaea300b3f8fae44e5bf5235c3e14e8354fa25b126f851543800a5e5edf2a621316768e90d8236d1926f49e3484424975bb30b3718d121ab15519e76c9cf94826fc073b6cc112f29c8a4e41fc84534afeb11d4bc49bc7dad2d1c305185f33"}, 0xd1) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) [ 2647.994346][T20376] FAULT_INJECTION: forcing a failure. [ 2647.994346][T20376] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.014620][T20376] CPU: 1 PID: 20376 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2648.022433][T20376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.022483][T20376] Call Trace: [ 2648.037806][T20376] dump_stack+0x172/0x1f0 [ 2648.042176][T20376] should_fail.cold+0xa/0x15 [ 2648.046761][T20376] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2648.052555][T20376] ? ___might_sleep+0x163/0x280 [ 2648.052568][T20376] __should_failslab+0x121/0x190 [ 2648.052588][T20376] should_failslab+0x9/0x14 [ 2648.066791][T20376] __kmalloc+0x2dc/0x740 [ 2648.071011][T20376] ? posix_acl_equiv_mode+0x21c/0x2d0 [ 2648.076414][T20376] ? __ext4_set_acl+0xdc/0x5a0 [ 2648.076425][T20376] __ext4_set_acl+0xdc/0x5a0 [ 2648.076441][T20376] ? posix_acl_clone+0xe0/0xe0 [ 2648.085760][T20376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2648.085771][T20376] ext4_set_acl+0x2c5/0x4f0 [ 2648.085781][T20376] ? ext4_get_acl+0x5b0/0x5b0 [ 2648.085792][T20376] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2648.085806][T20376] ? __posix_acl_chmod+0x203/0x3d0 [ 2648.117168][T20376] posix_acl_chmod+0x204/0x2f0 [ 2648.121907][T20376] ? posix_acl_xattr_set+0x140/0x140 [ 2648.127165][T20376] ? rcu_read_lock_sched_held+0x110/0x130 [ 2648.132854][T20376] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2648.138545][T20376] ? __mark_inode_dirty+0x241/0x1290 [ 2648.143801][T20376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.150028][T20376] ext4_setattr+0xfaa/0x2450 [ 2648.154596][T20376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.160810][T20376] ? evm_verify_current_integrity+0x8c/0xf0 [ 2648.166677][T20376] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.172890][T20376] ? evm_inode_setattr+0x70/0x170 [ 2648.177892][T20376] ? ext4_journalled_write_end+0x11b0/0x11b0 [ 2648.183849][T20376] notify_change+0xad9/0xfb0 [ 2648.188416][T20376] ? audit_add_tree_rule+0x560/0xbc0 [ 2648.193686][T20376] chmod_common+0x217/0x460 [ 2648.198180][T20376] ? perf_trace_cma_release+0x420/0x4c0 [ 2648.203713][T20376] ? vfs_fallocate+0xa50/0xa50 [ 2648.208453][T20376] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2648.214668][T20376] ? strncpy_from_user+0x2a8/0x380 [ 2648.219761][T20376] do_fchmodat+0xbe/0x150 [ 2648.224077][T20376] ? __ia32_sys_fchmod+0x80/0x80 [ 2648.228990][T20376] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2648.234430][T20376] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.240499][T20376] ? do_syscall_64+0x26/0x610 [ 2648.245161][T20376] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2648.250437][T20376] __x64_sys_chmod+0x5c/0x80 [ 2648.255005][T20376] do_syscall_64+0x103/0x610 [ 2648.259579][T20376] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.265448][T20376] RIP: 0033:0x457f29 [ 2648.269324][T20376] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:32:30 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x3000000]}) [ 2648.288902][T20376] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2648.297289][T20376] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2648.305237][T20376] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000020000180 [ 2648.313191][T20376] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2648.321137][T20376] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2648.329086][T20376] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000003 13:32:31 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x3000000]}) 13:32:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) sendfile(r1, r0, 0x0, 0x0) rmdir(&(0x7f0000000040)='./file0\x00') 13:32:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000200)='/dev/sequencer\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000280)=@sack_info={0x0, 0x8, 0x3}, &(0x7f00000002c0)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000300)={r2, 0xc8, "c2fd11b9d7f2fc9643ed5098f663d779d13d4f2ec88f3cf31776745c7275c7b41cf96df6706349174fdb3af1c9634502d34658e64ceaf70de8644541b3e5542a2bc1000033bc649763374c961fa74339d3a3061c43f6eed2339ac33e3abf2e1c66ba105d0d82368c9ae06c4b978f7a5b25cb292aae94ad2693147919e40f83a6986f4775fe61af22ea88ff11b522c7ccfcf415bf789cf923b3f042497820fcce421515defefbfb6d237c1b29e1ad3eb35dbc5edf92a1b8a04743022f0a0f5512312aa5e5f9c27e27"}, &(0x7f0000000400)=0xd0) ioctl$VIDIOC_G_SELECTION(r1, 0xc040565e, &(0x7f0000000240)={0x3, 0x2, 0x1, {0x4, 0x400, 0x8, 0xc9e4}}) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) setsockopt$sock_timeval(r3, 0x1, 0x15, &(0x7f0000000100), 0x10) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x0, 0x0) ioctl$BLKBSZSET(r4, 0x40081271, &(0x7f00000000c0)=0x1) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:31 executing program 1 (fault-call:5 fault-nth:4): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:31 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4000000]}) [ 2648.559479][T20921] FAULT_INJECTION: forcing a failure. [ 2648.559479][T20921] name failslab, interval 1, probability 0, space 0, times 0 [ 2648.606899][T20921] CPU: 1 PID: 20921 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2648.614546][T20921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2648.624595][T20921] Call Trace: [ 2648.627892][T20921] dump_stack+0x172/0x1f0 [ 2648.632243][T20921] should_fail.cold+0xa/0x15 [ 2648.636842][T20921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2648.642657][T20921] ? ___might_sleep+0x163/0x280 [ 2648.647518][T20921] __should_failslab+0x121/0x190 [ 2648.652461][T20921] should_failslab+0x9/0x14 [ 2648.656973][T20921] kmem_cache_alloc+0x2b2/0x6f0 [ 2648.661828][T20921] ? mark_buffer_dirty+0x143/0x660 [ 2648.666945][T20921] ? mark_buffer_dirty_inode+0xfd/0x410 [ 2648.672496][T20921] mb_cache_entry_create+0xc1/0x950 [ 2648.677699][T20921] ? __entry_find+0x2bf/0x3f0 [ 2648.682383][T20921] ext4_xattr_block_set+0x25f7/0x2fb0 [ 2648.687765][T20921] ? ext4_xattr_ibody_set+0x2b0/0x2b0 [ 2648.693137][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.699401][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.705640][T20921] ? xattr_find_entry+0x270/0x320 [ 2648.710670][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.716904][T20921] ? ext4_xattr_ibody_set+0x1d9/0x2b0 [ 2648.722285][T20921] ext4_xattr_set_handle+0xa35/0x1010 [ 2648.727660][T20921] ? __posix_acl_chmod+0x49/0x3d0 [ 2648.732697][T20921] ? ext4_xattr_ibody_inline_set+0x2b0/0x2b0 [ 2648.738764][T20921] ? from_kuid_munged+0x130/0x130 [ 2648.743797][T20921] __ext4_set_acl+0x358/0x5a0 [ 2648.748483][T20921] ext4_set_acl+0x2c5/0x4f0 [ 2648.752986][T20921] ? ext4_get_acl+0x5b0/0x5b0 [ 2648.757672][T20921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2648.763913][T20921] ? __posix_acl_chmod+0x203/0x3d0 [ 2648.769023][T20921] posix_acl_chmod+0x204/0x2f0 [ 2648.773797][T20921] ? posix_acl_xattr_set+0x140/0x140 [ 2648.779072][T20921] ? rcu_read_lock_sched_held+0x110/0x130 [ 2648.779087][T20921] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2648.779101][T20921] ? __mark_inode_dirty+0x241/0x1290 [ 2648.779115][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.779137][T20921] ext4_setattr+0xfaa/0x2450 13:32:31 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4000000]}) 13:32:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0x68, 0x5, "b7bb0af017fc04e124920119678c90c46ca3b7d211a98c43e536749cb02bdf9b416b29d449c9a0bd5f59e9234c92f407fb636e47a60ffb1b4da747d473f2e3c365716c4d14fabe5bb041a1e23d493169bc5e2051d4a5219f9a0aba429e51a318"}, 0x20000) [ 2648.790521][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.790541][T20921] ? evm_verify_current_integrity+0x8c/0xf0 [ 2648.790556][T20921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2648.790568][T20921] ? evm_inode_setattr+0x70/0x170 [ 2648.790588][T20921] ? ext4_journalled_write_end+0x11b0/0x11b0 [ 2648.802060][T20921] notify_change+0xad9/0xfb0 [ 2648.802075][T20921] ? audit_add_tree_rule+0x560/0xbc0 [ 2648.802094][T20921] chmod_common+0x217/0x460 [ 2648.802113][T20921] ? perf_trace_cma_release+0x420/0x4c0 13:32:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000040)=0x883, 0x4) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r0, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x180, r1, 0x29, 0x70bd29, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_SERVICE={0x30, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x32}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e24}, @IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e22}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x28, 0x2}}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @initdev={0xac, 0x1e, 0x1, 0x0}}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e24}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x7ff}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gretap0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ifb0\x00'}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x8001}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x3}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'caif0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x28, 0x2, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0xffffffffffffffff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@empty}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfff}]}, @IPVS_CMD_ATTR_DEST={0x50, 0x2, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xfffffffffffffffd}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x4701}, @IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x7}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xff}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x1ff}]}]}, 0x180}, 0x1, 0x0, 0x0, 0x80}, 0x800) 13:32:31 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x5000000]}) [ 2648.802130][T20921] ? vfs_fallocate+0xa50/0xa50 [ 2648.860567][T20921] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2648.866809][T20921] ? strncpy_from_user+0x2a8/0x380 [ 2648.871939][T20921] do_fchmodat+0xbe/0x150 [ 2648.876274][T20921] ? __ia32_sys_fchmod+0x80/0x80 [ 2648.881216][T20921] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2648.886679][T20921] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.892746][T20921] ? do_syscall_64+0x26/0x610 [ 2648.897424][T20921] ? lockdep_hardirqs_on+0x418/0x5d0 [ 2648.902710][T20921] __x64_sys_chmod+0x5c/0x80 [ 2648.907304][T20921] do_syscall_64+0x103/0x610 [ 2648.911897][T20921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2648.911913][T20921] RIP: 0033:0x457f29 [ 2648.921646][T20921] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2648.941242][T20921] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 000000000000005a [ 2648.949649][T20921] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:32:31 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x5a97) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$KVM_RUN(r0, 0xae80, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:31 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x5000000]}) [ 2648.957620][T20921] RDX: 0000000000000000 RSI: 0000000000000060 RDI: 0000000020000180 [ 2648.965588][T20921] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2648.973560][T20921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2648.981528][T20921] R13: 00000000004bda9b R14: 00000000004ce920 R15: 0000000000000003 13:32:31 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000080)=0xffffffff, 0xfffffffffffffddc) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000002c0)={0x10000, 0x7, 0x100, 0x400}, 0x10) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_CREATE_DEVICE(r0, 0xc00caee0, &(0x7f0000000300)={0x3, 0xffffffffffffffff, 0x1}) ioctl$KVM_HAS_DEVICE_ATTR(r1, 0x4018aee3, &(0x7f0000000380)={0x0, 0xb368667, 0x7, &(0x7f0000000340)=0x2}) unlink(&(0x7f00000003c0)='./file0\x00') r2 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r2, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0x6d, "1e8bcd4c762db59fd25e96bc9d9d64cbea5f05dc7a4cd9dab483cab51fe3b8f4c20c2605b871440ca532271e9c56ce1d9bf3b5e8d849426d0520b9e265adf26260258b5de34039414562ee2752372c55f71ca3e8f4ae1b575ef6f2c3c621b32b922850f55b663a51893cded76c"}, &(0x7f0000000000)=0x75) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000200)={r3, @in={{0x2, 0x4e20, @broadcast}}}, 0x84) bind$packet(r2, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r2, 0x107, 0x5, &(0x7f0000001000), 0xc5) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:31 executing program 1 (fault-call:5 fault-nth:5): mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:31 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6000000]}) 13:32:31 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6000000]}) 13:32:31 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = gettid() getpgid(r2) ioctl$VIDIOC_G_EXT_CTRLS(r0, 0xc0205647, &(0x7f0000000080)={0x9a0000, 0x7, 0x5, [], &(0x7f0000000040)={0x9f09d3, 0x7, [], @value64=0xfffffffffffffffb}}) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x7, 0xff, 0xdf2, 0x3, 0x80000000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setxattr$trusted_overlay_redirect(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000280)='./file0\x00', 0x8, 0x2) getsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000000080)=""/67, &(0x7f0000000100)=0x43) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:32 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:32 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7000000]}) 13:32:32 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7000000]}) 13:32:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000040)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:32 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x7) 13:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b696c3852e709071c73bfec26faacab122369696cf62a9ae28089623bda8e27106f5a30cb0cccd1bf2de8cf675ad508018057d9b73fa0f79ecebd738d0fe17c314e402bb30b91da4f79828b002099218d50c9730c327ae950a6ab690859b1e890de6943540de6bede6cd51df3c607ca016e27b1384968f9905771213b"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0xf, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:32 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x48000000]}) 13:32:32 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x48000000]}) 13:32:32 executing program 5: r0 = open(&(0x7f0000000040)='./file0\x00', 0x400, 0x190) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'os2.', 'pagemap\x00'}) accept$unix(r0, &(0x7f0000000200), &(0x7f0000000100)=0xfffffffffffffe45) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:32 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f0000000240)='./file1\x00', 0x400, 0x20) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000300)={&(0x7f0000000200)='./file0/file0\x00', r0}, 0x10) r1 = request_key(&(0x7f0000000380)='.dead\x00', &(0x7f00000003c0)={'syz', 0x0}, &(0x7f0000000400)='mime_type\\trustedkeyring\x00', 0xfffffffffffffffb) keyctl$KEYCTL_PKEY_VERIFY(0x1c, &(0x7f0000000440)={r1, 0x6, 0x3}, 0x0, &(0x7f0000000500)="c5017ab48fe3c8ab14b07ecefc4a89c075470270bc153c86187115fe0d9ae32c2b355c3ce9e47d0febd49011c00275c6a8b69adbe6ef71fc38be0734f01989a6b13595384bc1018973aec93569cc6de36fb4ab71849354e630157ae5a95a0a48692187e003c01ac70f1d5f318bc7381086", &(0x7f0000000580)="d5dfc9c09be2a3232b8bf1728a6cf9980c3f614196251ffa1c1f21bdab74e287f3d63b59d06464bfc542a29b52d2b6a1fc5f813fe23997c85034404656451f4e5320790463da5bea437b319d68e5b810c6b622c57e66409d17d7d2f21afe25b6658ac5b218a9fb986a1a17a5ee7e4e5d3496f1a06a5a4f236daecf") lsetxattr$security_selinux(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xfffffffffffffd08, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000080)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10ae00bd954e02000000007cc5f7fb89836d43b6"], 0x34, 0x0) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x185) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) open(&(0x7f0000000340)='./file1\x00', 0x400, 0x2) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x53) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f00000000c0)={&(0x7f0000036000/0x3000)=nil, &(0x7f000002f000/0x1000)=nil, &(0x7f000002e000/0x3000)=nil, &(0x7f0000037000/0x3000)=nil, &(0x7f0000038000/0x3000)=nil, &(0x7f000003b000/0x4000)=nil, &(0x7f000003d000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f000002d000/0x3000)=nil, &(0x7f000003b000/0x3000)=nil, &(0x7f0000000080)="e35887555a8274d27eb97a0be2430fdb", 0x10, r0}, 0x68) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:32 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c000000]}) 13:32:32 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c000000]}) 13:32:32 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0x5, 0x800) ioctl$sock_inet_SIOCDARP(r0, 0x8953, &(0x7f0000000200)={{0x2, 0x4e23, @loopback}, {0x307, @random="554d3cf46fe4"}, 0x20, {0x2, 0x4e20, @broadcast}, 'ip6tnl0\x00'}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="0200000100000000000016040000000000002010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:32 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$EVIOCGUNIQ(r0, 0x80404508, &(0x7f0000000000)=""/40) ioctl$EVIOCGPROP(r0, 0x80404509, &(0x7f00000000c0)=""/213) 13:32:32 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000080)) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:32 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000001c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@multicast2, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000400)=0xe8) r2 = getegid() lchown(&(0x7f00000003c0)='./file0/file1\x00', r1, r2) r3 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000340)='/dev/dlm-control\x00', 0x2400, 0x0) ioctl$TUNSETTXFILTER(r3, 0x400454d1, &(0x7f0000000380)=ANY=[@ANYBLOB="010006000180c200400faaaaaaaaaaaa000000000000aaaaaaaaaaaa0180c200000faaaaaaaaaa0f"]) migrate_pages(r0, 0x0, &(0x7f0000000200)=0x68b4, &(0x7f0000000240)) 13:32:32 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x68000000]}) 13:32:32 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) eventfd(0x6) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r1, &(0x7f0000000380)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x14c, r2, 0x20, 0x70bd27, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0xaf4}, @IPVS_CMD_ATTR_SERVICE={0x3c, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'dh\x00'}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x7}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x8c}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x200}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x100}, @IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x9977}]}, @IPVS_CMD_ATTR_DAEMON={0x84, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @loopback}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x3f}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x1}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x41}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x8}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x23}}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @empty}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @initdev={0xac, 0x1e, 0x0, 0x0}}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x1}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x10001}]}, 0x14c}}, 0x8000) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x7) 13:32:32 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x68000000]}) 13:32:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x103000, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:33 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000640)=ANY=[@ANYBLOB="02000000010000000000a24c4ded9982396b56b11cd4e92cb16e712376bc4506fdb6c68169d3bde1e4e26d25cf893787d38f3655efd68e143c093a8a608d683f", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000600)='/dev/mISDNtimer\x00', 0x800, 0x0) fstat(r0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f00000003c0)=0xc) fstat(0xffffffffffffff9c, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() r5 = getegid() lstat(&(0x7f0000000480)='./file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() setxattr$system_posix_acl(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000580)={{}, {0x1, 0x6}, [{0x2, 0x3, r1}, {0x2, 0x2, r2}], {0x4, 0x6}, [{0x8, 0x0, r3}, {0x8, 0x0, r4}, {0x8, 0x1, r5}, {0x8, 0x7, r6}, {0x8, 0x0, r7}], {0x10, 0x1}, {0x20, 0x5}}, 0x5c, 0x2) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f00000004c0)='./file0\x00', &(0x7f00000002c0)='system.\xc9\xe2.\xf2\x14S\xfeql_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000f7ff0010000000000000002000000000000000"], 0x1, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:33 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000300)='/dev/kvm\x00', 0x2, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = open(&(0x7f0000000080)='./file0\x00', 0x101200, 0x8) connect$vsock_stream(r3, &(0x7f00000000c0)={0x28, 0x0, 0x2711, @my=0x0}, 0x10) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) setsockopt$RDS_GET_MR(r3, 0x114, 0x2, &(0x7f0000000240)={{&(0x7f0000000100)=""/255, 0xff}, &(0x7f0000000200), 0x8}, 0x20) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b73"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff}) r5 = socket$inet_udp(0x2, 0x2, 0x0) close(r5) r6 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r6, 0x401c5820, 0x0) r7 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x200, 0x0) ioctl$int_in(r6, 0x800000c0045006, &(0x7f00000004c0)=0x100000035) sched_setaffinity(0x0, 0xfffffffffffffff8, &(0x7f0000000140)=0x40000000000009) r8 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x44b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r9 = shmget(0x1, 0x3000, 0x0, &(0x7f0000ffc000/0x3000)=nil) shmat(r9, &(0x7f0000ffb000/0x4000)=nil, 0x6ffd) ioctl$sock_inet6_tcp_SIOCINQ(r7, 0x541b, &(0x7f0000000440)) clone(0x0, 0x0, 0x0, 0x0, 0x0) write$P9_RMKNOD(r4, 0x0, 0x0) ioctl$FS_IOC_GETFSLABEL(0xffffffffffffffff, 0x81009431, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r7, 0x6431) inotify_add_watch(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x20) bind$bt_l2cap(r6, &(0x7f0000000100)={0x1f, 0xffffffffffffffff, {0x8, 0x1, 0x8, 0x401, 0x3, 0x40}, 0x610, 0x6}, 0xe) ioctl$FIDEDUPERANGE(r8, 0xc0189436, 0x0) r10 = add_key$user(&(0x7f0000001500)='user\x00', &(0x7f0000001540)={'syz', 0x1}, &(0x7f0000001580)="6018ee52e0e869c6e2094a221ec6e58e484fd1cf7395bd0e27bac4f27f3bd10febe1e677e6ddd7b6b32a91930f302c379b27e177da91758f419a369c3d9bf80a661d37aa885af9030124daa277c18166096124a63b02844916362ed52c3acf630ec530c5e24029da665e2433313bcac02dac6c78940c20979db74a2c7060c57f7b20f2a2f69b47c3cf5c310796e8a192d052212a02a60756946174e44206372984d2fc67a4ddbf0c66a6ee68941cf9f6aea0309357741fedb8316206ede0663f420472ce796b38e38892ce3c8ae5042762bf0da55e6986e58e23c9edaa5498c3eb6c359c6624c70a6ad974e0fb089cc937", 0xf1, 0xfffffffffffffffb) keyctl$assume_authority(0x10, r10) 13:32:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c000000]}) [ 2650.421843][ C1] net_ratelimit: 2 callbacks suppressed [ 2650.421851][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.433211][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2650.439002][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2650.444820][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:33 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c000000]}) 13:32:33 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000000)='./file0/file0\x00', r0}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x101, 0x5e, 0x6, 0x9, 0x4, 0x9, 0x1, 0x3f, 0x4, 0x2705, 0x0, 0x7f, 0x4, 0xffff, 0x10001]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r1, 0x7}, &(0x7f0000000540)=0x8) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001110000000000b1fa7aa428070091926b551b09eaa1af88c4000000000000001000000000000000200000000000000038a943e0bc2a2e9f43ec145171d781f4b9b56182cc4629fe5af33ebf869f"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000580)={0x7, 0x1, 0x1c0000000000000, 0x0, 'syz1\x00', 0x783}) 13:32:33 executing program 4: bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) bind$llc(r1, &(0x7f0000000080)={0x1a, 0x305, 0x400, 0x401, 0xa2c1, 0x3}, 0x10) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(0xffffffffffffffff, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) r2 = shmget(0x1, 0x2000, 0x54000020, &(0x7f0000ffd000/0x2000)=nil) fcntl$F_SET_FILE_RW_HINT(r0, 0x40e, &(0x7f00000000c0)=0x5) shmctl$SHM_LOCK(r2, 0xb) 13:32:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x74000000]}) 13:32:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000080)={0x3, r2}) [ 2650.649978][T23959] Unknown ioctl 21531 13:32:33 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x42, 0x0) ioctl$TIOCGSOFTCAR(r1, 0x5419, &(0x7f00000001c0)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = socket(0x10, 0x803, 0x0) write(r2, &(0x7f0000000140)="240000001e0025eaa87865f51ef6bce90a04000200bff20182a9000c080009000d000000", 0x24) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000200)={0x7b, 0x0, [0x400, 0x3ff, 0x1f, 0x4]}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100e6000000000000040000000000000010000000000000002040000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:33 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x74000000]}) [ 2650.884045][T23959] Unknown ioctl 25649 13:32:33 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000500)={{{@in=@local, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f0000000440)=0xe8) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000340)='2$\x16\x92\xf0\xe5\x037\xc3\xddV\xafsystem.posix_acl_dG\xc7F\x1blt\x00f\x9aZ\x92g\x1d\xeb2;N\xed\x0ff\xe5\x88\x8a\xce\xd6S\xfer\xbf\b\x9a\xd9}us,\"\x88\x8b\xe5\x87\x96\xb6WD\xdb\x14\x13Y\'x_JT\x93\x1dl\x95*+\xfb\xb3E\xc5\xf7I{\x11\xb9', &(0x7f0000000480)={{}, {0x1, 0x1}, [{0x2, 0x6, r1}], {0x4, 0xfffffffffffffffc}, [{0x8, 0x0, r0}, {0x8, 0x2}]}, 0xfffffffffffffcdd, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:33 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a000000]}) 13:32:33 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000007fdffffc) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x100a}}, 0x20) init_module(&(0x7f0000000100)='\x00', 0x1, &(0x7f0000000140)='nodev\x00') write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000000c0)={0xf, 0x8, 0xfa00, {r1, 0x9}}, 0x10) [ 2650.950488][T24667] Unknown ioctl 21531 [ 2651.044992][T24682] Unknown ioctl 25649 13:32:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) prctl$PR_GET_ENDIAN(0x13, &(0x7f0000000080)) r1 = fcntl$dupfd(r0, 0x406, r0) setsockopt$inet_group_source_req(r1, 0x0, 0x2b, &(0x7f0000000140)={0xd0a4, {{0x2, 0x4e21, @local}}, {{0x2, 0x4e20, @empty}}}, 0x108) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="916d4d1f6716c900a2d17ef0faf4a854d9d4a62532b9e564a40a7fc1be46815ea29c47e1c4620bc94404676d979859964d338f3463b00b30f0a1dd3f4a0f4420e622fea87d8adfa4434bc665f37d2244575897bb65abb792eea872f87b1c96322f6bfe2be8f2c30edec7d813c4c2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:34 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a000000]}) 13:32:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) syz_mount_image$hfsplus(&(0x7f00000001c0)='hfsplus\x00', &(0x7f0000000200)='./file0/file0\x00', 0xfffffffffffffff8, 0x6, &(0x7f0000001640)=[{&(0x7f0000000340)="d77230d54002e10d9a5472edaeb8aa1fbfcbae7837b0913756eb78e5db695c41eb81f84f291b5a35cade24edaa5fb7417cfdf64187b4e42d9a8200aa621ba854e8444840a3835c8b32bd28b5c3a709aaa6c73ef0f57931e5d725563b8c181d5f127919fdea4839cde91da3e41dac7aa49980dd6c83f923315e1f3692204fbc143464153196412ccfec85d28bc3f8394f8cfb8770e11ea46d3207175a421e2d2d60a6f96719680618ac365f17d78c8738f80ca2137c031e562bc5f5e7cac82b928c883a4b0c7ecf86ac66cc835080ae45cca61995252d66e60fd312f08308407c7905d765f59f87e1a104a7f7798c42f0d851e575da", 0xf5, 0x80000001}, {&(0x7f0000000440)="1b00517c7c28cb30b18648ef00f61d6cd53dc32e816e03e23a11a99171ab25a56a7d6e5ed250ecec07d1e0c8eef7053d735bd481c086785c863a294263bd54150463c75dee4b69a935debb51b3b8dc327b62a482d2dcaf8ca7f5b8196f2a", 0x5e, 0x200}, {&(0x7f0000000240)="07009325352d2f617814c8ca4e672c1e95b28b8a97", 0x15, 0xfffffffffffffff8}, {&(0x7f0000000500)="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", 0x1000}, {&(0x7f0000001500)="3ae4623d91bdf31ab98eaacad99799ccaa64c14a69e1a4577454397d4687022d50e8d18e5242026a9b09005f6f86d4842b3fa22721139662da90c9946fe240fa5b994b908ae8fe0f114a0597e9c4a47a", 0x50, 0xa3}, {&(0x7f0000001580)="d7f1d84c00afd868d1d8d122d78e28e5b1c196b56ae7bb1590291bcd942427f19788c0ad17976ebea3d6fe2b8fd09fa5eaa7532143cfc2c6758870110b6661f406cb5760550a3ce7c4b8dd21513c8775b4bd0fa4369262cf25e38295041de15458c145ebd18f6d59e8745c9a55af3f89dca7e3effb71ae778f4ccda0084a9fd73ef9133d9de0a9495e473856", 0x8c}], 0x80000, &(0x7f0000001700)={[{@session={'session', 0x3d, 0x9}}, {@barrier='barrier'}, {@nodecompose='nodecompose'}, {@nls={'nls', 0x3d, 'iso8859-13'}}, {@nls={'nls', 0x3d, 'koi8-r'}}, {@nodecompose='nodecompose'}, {@umask={'umask', 0x3d, 0x3}}], [{@smackfsdef={'smackfsdef', 0x3d, 'security.selinux\x00'}}, {@measure='measure'}]}) 13:32:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) r2 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x200001, 0x0) r3 = getpid() ioctl$BLKTRACESETUP(r2, 0xc0481273, &(0x7f00000000c0)={[], 0xffff, 0x4, 0x65, 0x8001, 0x3, r3}) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) 13:32:34 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='net/sockstat\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$KVM_TPR_ACCESS_REPORTING(r1, 0xc028ae92, &(0x7f0000000080)={0x65, 0xc214}) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}) 13:32:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r1, 0x0, 0x10004007ffffffc) 13:32:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:34 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x100000000000000]}) 13:32:34 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpu.stat\x00', 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000100), &(0x7f0000000140)=0x4) mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x6) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) sendto$inet6(r0, &(0x7f0000000200)="dd9b", 0x2, 0x44004, &(0x7f0000000240)={0xa, 0x4e23, 0x0, @rand_addr="9888a8ceb54141bb9f6c3c3137915a57", 0x2609ba9d}, 0x1c) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x300000000000000]}) 13:32:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3210, 0x88000) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000040)={@in={{0x2, 0x4e20, @rand_addr=0x9}}, 0x0, 0x27db4e24, 0x0, "205c44052358767febbdda0b32398cb49e4f2efbe80790200dcfa32840ec65b0b3be829ccaa2ae7a30a516f432b9bf9e3518cb7114e05feca0637ec45acd15736e8aa30881de2f9615f495877622a2ce"}, 0xd8) 13:32:34 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xffffffff, 0x40000) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'ipddp0\x00', 0x3}, 0x18) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:34 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x200000000000000]}) 13:32:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0x14) bind$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e21}, 0x6e) setxattr$system_posix_acl(&(0x7f0000000780)='./file0\x00', &(0x7f0000000740)='system.posix_acl_default\x00', &(0x7f00000007c0)=ANY=[], 0x0, 0x2) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0}, &(0x7f0000000400)=0xc) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000500)={{0x4, 0x7, 0x3, 0xfffffffffffffffb, 'syz0\x00', 0x1}, 0x0, 0x123, 0x80000000, r1, 0x2, 0x1, 'syz1\x00', &(0x7f0000000440)=['&\x00', '@user\x00'], 0x8, [], [0x8001, 0x4, 0x7bb1, 0x8001]}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001000000000000002400000000000000100000000000000020000000000000008f114e20e3ec318d1c5254fe702778a3c6352d8d7fd7d262af0699c7e48034f27ceea1267e1f12a087f2c0b31361ee28b6468953cb41a404910a3f149edf813768c621f418e59c9ade9f8c4165e6a712d36ac741b0467c77471bf8e07bab8906adab154c1e60cb69ff8c00aec31f8983ed91a07858321194f7854b59e36a94d7dbf4173daab78dc9c46c06"], 0x24, 0x0) openat$cgroup(r0, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}) 13:32:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'bond0\x00', 0x20}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000080)={0x0, 0x3ff, 0x5, 0x272f, 0xffffffff, 0xc46c}, &(0x7f00000000c0)=0x14) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={r2, 0x200}, 0x8) 13:32:34 executing program 1: mkdir(&(0x7f0000000d80)='./file1\x00', 0x110) fstat(0xffffffffffffffff, &(0x7f0000000a80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$sndpcmc(&(0x7f0000000cc0)='/dev/snd/pcmC#D#c\x00', 0x7fffffff, 0x40000) setsockopt$inet_sctp_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000d00)={0x9}, 0x1) syz_mount_image$jfs(&(0x7f00000001c0)='jfs\x00', &(0x7f0000000200)='./file0/file0\x00', 0x0, 0xa, &(0x7f0000000980)=[{&(0x7f0000000340)="153fc5db61e10e9354d05ad3121a9ad178c51196db8404a3cefb9d7d108c325401e8eedfc15b39943455e9fb125e4486be5b69514bc2831a721db62a7467a707644df074ae3ff4281ef66b6f2fd1690eca8763b451bc782ec41528f64b7fd8b68f3f", 0x62, 0xce9}, {&(0x7f00000003c0)="94dbf46a7d453ff04712ceac97cb00ec8ef089ed27a2367835483eae0b871fa6302df9247f4dc2b28bb470d8ad9832f0178257d79c6652fb4ecb824534e000d67ae89952e4302f3f9d1f19cdc97d001a7eadae59a4b000fd8430ac65899b66941c75616d1b397ed8fede65", 0x6b, 0x8}, {&(0x7f0000000500)="26d751a8e57543d3c0b2424046b1d829057f33dc1747ca607a55c2b8f2c7abb41175b459bbe71c9b23029f7e8cd9fd8808afec1bec70f1aeff6e5fbecfe6d4c0ddb95afcb2a33753dd36b462f223c8696f9ce9d8c3e3f7fe06f021fd1a550143fe491317432d95de7cfa386e7ba3569883d38fa2ce2738e34c8d2cd01360e62d4583b08ba76aac40158beff818b8c6813c982d06ad825dbd1a67f71817e80a4469eefff4182789dd39f4ec062576375f545b3fde67485bae898f4f95b16eadb3caa3a1a74b2f117526ea36b51c761751f89468427e81d83638a513a5de3a9d38aacb078c1bff4b47d9484985f31c7c", 0xef, 0x9}, {&(0x7f0000000440)="addb1bebd981bd4c1d421438c69c2caa9f08d6bc0d58eedbfa2054facef53b8377e3b7b40fb4d9fce309d52d1f622b177caaf86a398ae2a005dce01db07caf5e14aa525cb92e013a56eb6f4fb1d678a458eebfd5ad4c790bfa4b235ee789b63297a7f119ea5bfb068b691b14", 0x6c}, {&(0x7f0000000240)="2504491c8d0291504531906c9ca15101833ff773242f5afb9812557e2f094777a05d87", 0x23}, {&(0x7f0000000600)="c12182eeb0e4e3868d752945f8d63e801be66ede96514ebde01329464eca2749694564ea0cf8ab12a33199dede67b9a8305315874fd6a785bb05e13f16c2942b045b9dec8aa3ebff", 0x48, 0x7}, {&(0x7f0000000680)="d36cc0e4640a2a5eadb910731592a22810477c63121af471144a71810d05d11ec74e7f4db5eb892772f828ee7a17669485894fb85f0fe183554048055d51f8f06021f18a4efa28ec94108b53e57d5bba5d4fa1c8369577c2e73aa4604eb43685ceb17a338ec010dcf71fc31db0b7588a8830ae7682bd0ae24c722cf4fa20227407cdfef906585a34", 0x88, 0x1}, {&(0x7f0000000740)="4ff163b24b8fc0bde5def610c7421307059eed788938c453a101ccd171ad3709e7b4ffc570dd08b5d75f2d6e78e559395abafb6559d5cbe6984679b13e93b495bf1744ffdd6de487734cd736156c4598de3f8d97da426707311a8e46873261b2f75b77588cf9d3dc0378981bec0e859a731fd26e07de011593e3181772e93388358e80ef1da17e722277c5a21bb77f80a21c296f05404b0fe17839c0a8e1616111fd2e96dafc3e7bd8bd2467d5a244bb083bd1b9602d85f9173971b65f5756e56133dfa2c9c1869f3b92734a288c90486346794fed1010dec147da56204444d84d8ce61d270eaaab", 0xe8, 0x66}, {&(0x7f0000000840)="27b5db4e7e587a183b3a4d27154f1af16a425075ddbe0c6ae8332df0de05be", 0x1f, 0x800}, {&(0x7f0000000880)="6fc09716a42231b7814d4c8c348a210ccf0207275c1c86bbbe2ca31e5e9ddd6224d83868c408b721e3702dfd01c7e5d0f4427f3ca7afc9e02a98734445900a8bbc686439a6bd8ac96fac2a382b44ea47288db375e22efac44cdaa661d371743a8b1cbe976c0d43e23441545db7c2e59c2159415c6bbf71095175efcdb4f3cd2f038beee86a82a7ca0b628d591139f72184a9d39e87491a0a4150441e2ad3e60093c305a6ec65d9e70c976fa5ead170f976e5d9ac4f5fdeb9cef3c307d4ebe54df5a2e660ba2eb859aac2dc61070581f30bb85c64261662a09c0b34d31398d11ee386a3e7f8c65975a9766d3b5d5fdccf588340ab780e40", 0xf7, 0x4}], 0x914440, &(0x7f0000000b00)={[{@usrquota='usrquota'}, {@nodiscard='nodiscard'}, {@gid={'gid', 0x3d, r0}}, {@errors_continue='errors=continue'}, {@discard_size={'discard', 0x3d, 0x6}}, {@integrity='integrity'}, {@discard='discard'}, {@resize_size={'resize', 0x3d, 0x2}}, {@integrity='integrity'}, {@errors_remount='errors=remount-ro'}], [{@pcr={'pcr', 0x3d, 0xc}}, {@dont_appraise='dont_appraise'}, {@appraise_type='appraise_type=imasig'}, {@obj_user={'obj_user'}}, {@smackfsroot={'smackfsroot', 0x3d, '\x90user^'}}]}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000c00)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="2c602732d84c148720002a299e5b2b15d2b7d511000000000000190639a15b1a0260e657407681"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) accept4$vsock_stream(r1, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0x10, 0x80800) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:34 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x300000000000000]}) 13:32:34 executing program 3: r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x200000, 0x0) ioctl$KVM_ARM_SET_DEVICE_ADDR(r0, 0x4010aeab, &(0x7f00000000c0)={0x1ff, 0x100000}) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000340)=ANY=[@ANYBLOB="830000004c40981d2cb8e0c720ba18a351ba4909544ccc9bd8ab318771d9101f5b50891170db4d2af35b2e41023553c906c57883032c184fd4a0e3b33dd7556402a1ccb668bc230ab0999e7be41e2141a04d5fddf2e1f9f60e70ada1efd9872306831b4ea114f93d4d6404a385201311b7866c5313684adb9a5b3ec730e1b0741fc3adcb14fa1efcd364b287df58facedd26f84dfb97f9dfe11035de71e9d890d96ef54284bf8f9394088e44e745e67bc4990a171619cd8692c00f14e23e62fcad9be4abab18f0cc67fbc97ea384c5b00bb5fefd4491442813959cb1796050090a1cd53206218c38baf1ee1c51ab3ee52ec6a20c7b10b330ea11"]) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="060004001014"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) write$FUSE_OPEN(r0, &(0x7f0000000440)={0x20, 0x0, 0x2, {0x0, 0x2}}, 0x20) ioctl(r4, 0x1000008912, &(0x7f0000000040)="0adc1f123c123f3188b070") r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') ioctl$VIDIOC_DBG_S_REGISTER(r0, 0x4038564f, &(0x7f0000000180)={{}, 0x8, 0x0, 0x7fff}) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f00000001c0)=0x0) sched_getattr(r7, &(0x7f0000000200), 0x30, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r0, 0x4058534c, &(0x7f0000000100)={0x6, 0x5, 0x2, 0x0, 0x100000001, 0x100000000}) sendmsg$TIPC_CMD_GET_LINKS(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, r6, 0x1, 0x0, 0x0, {{}, 0x0, 0x4, 0x0, {0x8}}}, 0x24}}, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 13:32:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0x1f, &(0x7f0000000080)=0xffffffff, 0x4) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:34 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}) 13:32:34 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vga_arbiter\x00', 0xb2043, 0x0) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x7, 0x4) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:34 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) sync_file_range(r1, 0xfff, 0xfffffffffffffff7, 0x3) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e24, @rand_addr=0x4}, 0x10) 13:32:35 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x400000000000000]}) 13:32:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = open(&(0x7f0000000080)='./file0\x00', 0x20000, 0x180) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1c, &(0x7f0000000200)={@remote, 0x0}, &(0x7f0000000240)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x23, &(0x7f0000000380)={@local, @rand_addr, 0x0}, &(0x7f00000003c0)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000400)={{{@in=@initdev, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@broadcast}, 0x0, @in=@multicast2}}, &(0x7f0000000500)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000540)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@remote}, 0x0, @in=@remote}}, &(0x7f0000000640)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000680)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @empty}}}}, &(0x7f0000000780)=0xe8) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x62381bb25e670a85, &(0x7f00000007c0)={@empty, @loopback, 0x0}, &(0x7f0000000800)=0xc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000840)={{{@in6=@remote, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in6=@dev}}, &(0x7f0000000940)=0xe8) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000980)={0x0, @loopback, @broadcast}, &(0x7f00000009c0)=0xc) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x27, &(0x7f0000000b00)={@dev, @broadcast, 0x0}, &(0x7f0000000b40)=0xc) getsockname$packet(0xffffffffffffffff, &(0x7f0000000b80)={0x11, 0x0, 0x0}, &(0x7f0000000bc0)=0x14) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000c00)={'vcan0\x00', r4}) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001280)={{{@in=@loopback, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@broadcast}}, &(0x7f0000000d40)=0xe8) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000d80)={{{@in=@dev, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@empty}}, &(0x7f0000000e80)=0xe8) getsockname$packet(0xffffffffffffffff, &(0x7f0000000ec0)={0x11, 0x0, 0x0}, &(0x7f0000000f00)=0x14) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000f40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000f80)=0x14) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x24, &(0x7f0000000fc0)={@initdev, @broadcast, 0x0}, &(0x7f0000001000)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000001040)={{{@in6=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@remote}}, &(0x7f0000001140)=0xe8) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000001180)={0x0, @rand_addr, @local}, &(0x7f00000011c0)=0xc) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001200)={0x0, @initdev, @multicast2}, &(0x7f0000001240)=0xc) sendmsg$TEAM_CMD_PORT_LIST_GET(r1, &(0x7f0000001a80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10346840}, 0xc, &(0x7f0000001a40)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="98070000", @ANYRES16=r2, @ANYBLOB="02002dbd7000fedbdf250300000008000100", @ANYRES32=r3, @ANYBLOB="2002020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000001000008000600", @ANYRES32=r4, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000002000038000100240001006e6f746966795f70656572735f696e74657276616c000000000000000000000008000300030000000800040005000000400001002400010071756575655f6964000000000000000000000000000000000000000000000000080003000300000008000400fc02000008000600", @ANYRES32=r6, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000000000038000100240001006e6f746966795f70656572735f636f756e740000000000000000000000000000080003000300000008000400ffffffff40000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040060000000080007000000000040000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r7, @ANYBLOB="080007000000000008000100", @ANYRES32=r8, @ANYBLOB="740102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r9, @ANYBLOB="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", @ANYRES32=r10, @ANYBLOB="080007000000000008000100", @ANYRES32=r11, @ANYBLOB="1c0202003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e0574657276616c00000000000000080003002340b3985d3bff0c1f0000003c00010024000110757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r13, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r14, @ANYBLOB="0800070000000000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000001000008000600", @ANYRES32=r15, @ANYBLOB="38000100240001006e6f746966795f70656572735f696e74657276616c00000000000000000000000800030003000000080004007f0000003800010024000100616374697665706f727400000000000000000000000000000000000000000000080003000300000008000400", @ANYRES32=r16, @ANYBLOB="3c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r17, @ANYBLOB="3c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r18, @ANYBLOB="08000100", @ANYRES32=r19, @ANYBLOB="70010200400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000010000008000600", @ANYRES32=r20, @ANYBLOB="400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004000500000008000600", @ANYRES32=r21, @ANYBLOB="3c00010024000100757365725f6c695d6b757000000000000000000000000000000000f1bf00000008000300060000000400040008000600", @ANYRES32=r22, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004004000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000200000008000600", @ANYRES32=r23, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000600000008000100", @ANYRES32=r24, @ANYBLOB="3c00020038000100240001006e6f746966795f70656572735f636f756e74000000000000000000000000000008000300030000000800040007000000"], 0x798}, 0x1, 0x0, 0x0, 0x24000011}, 0x4) r25 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r26 = ioctl$KVM_CREATE_VCPU(r25, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r25, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f1569"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r26, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r26, 0xae80, 0x0) 13:32:35 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x2) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {0x8, 0x2}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000040)=ANY=[@ANYBLOB="0200080000654475037469ed1e8cb4000000000500000078e382a3d8e8013f5747f2040000000000000010000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:35 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x600000000000000]}) 13:32:35 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x500000000000000]}) 13:32:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0)='TIPCv2\x00') sendmsg$TIPC_NL_PUBL_GET(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0xd8069}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x44, r2, 0x0, 0x70bd29, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x30, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x9}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x4000) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:35 executing program 5: getpid() r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cachefiles\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffff9c, 0x84, 0x75, &(0x7f0000000140)={0x0, 0xffffffffffffff00}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r1, @in6={{0xa, 0x4e20, 0x6, @ipv4={[], [], @multicast2}, 0x7fff}}}, 0x84) gettid() getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000080)={0x0}, &(0x7f00000000c0)=0xc) r3 = syz_open_procfs(r2, &(0x7f0000000040)='pagemap\x00') r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r4, r3, 0x0, 0x10000007ffffffc) ioctl$FICLONE(r4, 0x40049409, r3) 13:32:35 executing program 1: r0 = openat$vfio(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/vfio/vfio\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000400), &(0x7f0000000440)=0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x1) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r1 = syz_open_dev$binder(&(0x7f0000000200)='/dev/binder#\x00', 0x0, 0x802) r2 = syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0x101, 0x2100) sendfile(r1, r2, &(0x7f0000000340), 0x1) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r2, &(0x7f0000000380)={0x28, 0x2, 0x0, {0x3, 0x100, 0xfff}}, 0x28) openat$cuse(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/cuse\x00', 0x2, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) socket$inet6(0xa, 0x8080f, 0x6) 13:32:35 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x600000000000000]}) 13:32:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000080)=ANY=[@ANYBLOB="fb2c0aa9e608280f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vcs\x00', 0x100, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x4, &(0x7f0000000040), 0xf, r3}) 13:32:35 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x700000000000000]}) 13:32:35 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x7f03, 0x800) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) write$nbd(r1, &(0x7f00000000c0)={0x67446698, 0x0, 0x1, 0x0, 0x4, "d2bdd3ac88b5dae9b1c6d731e681a9d9b9e69564523cfb62e51bf4016bdc0e6b22a63a1d0b31e192cd922069a2323310be225b144a30b55837fa69a966868e1042e14e914fbaedbfd2a4237d1bb4b7"}, 0x5f) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$sock_inet6_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) [ 2652.741800][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.747677][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.753478][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.759220][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2652.765038][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2652.770767][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:35 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x700000000000000]}) 13:32:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) restart_syscall() r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:35 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4800000000000000]}) 13:32:35 executing program 1: r0 = dup3(0xffffffffffffff9c, 0xffffffffffffff9c, 0x80000) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000200)='nbd\x00') sendmsg$NBD_CMD_STATUS(r0, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x20, r1, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@NBD_ATTR_BLOCK_SIZE_BYTES={0xc, 0x3, 0x8c}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x48000) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000500)={0x101, {{0x2, 0x4e22, @rand_addr=0x1}}}, 0x88) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="3e863e01bf6c7c4a8a5dae2b806e5e7f74df34f3c0b5e935d3066a22c95713028c524416db5729b4015d0acf83fe5646cc05afc0a65d34df54de9c0b8b4c52fb798342425d696ecf9e9a069113319361918fb45ee03dc407ac88b2e4a2ed13f8244b6bc698e75b5ca7b8ad20166c8ce01bccc36ff87067e9223cd04f6135779f6b5d03d78eda1807f40ee618cb7c3e94", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000003c0), &(0x7f0000000400)=0x4) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000004005937275718124b71816c47d75fc74431000000000000"], 0x24, 0x0) syz_open_dev$audion(&(0x7f0000000440)='/dev/audio#\x00', 0x80, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:35 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x2, 0x0) getxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=@known='trusted.overlay.opaque\x00', &(0x7f0000000100)=""/23, 0x17) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r3 = semget$private(0x0, 0x0, 0x200) semtimedop(r3, &(0x7f0000000140)=[{0x4, 0x800}, {0x4, 0xbb, 0x1000}, {0x0, 0x0, 0x800}, {0x4}, {0x0, 0x7, 0x1000}], 0x5, &(0x7f0000000180)={0x0, 0x1c9c380}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:35 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:35 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4800000000000000]}) 13:32:35 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) fstat(0xffffffffffffffff, &(0x7f0000001980)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000001a40)='system.posio_acl_default\x00\xdfSTULv\xe6;d V\xa8;\xfd;\x01\xaaW=\xd2\x81\xfb\x1d\x80\x8d8\x00\x10\x00\x00\x00\x00\x00\x00W3\xb5g\x18a\xed\xecp/{\x86?\xdb\x96\xb8\x98RpP\xc6\xba\x8d\x98\xefi\xa3\xd5k\xe6X\x96K\xe0\xc4q\x94\x11\x93w\v\x9d\'J4OcV\x9c9\xa4M\xf0c\xb2\xbc\xf2\x99C\xe9\xdb8\xf5\xc0\xe6k\x82\xa6U3\xb0g\x9f\x9c\x95\\f\xd7\x0f3\xc6\xb9\x14-JQB)\x13E\xb0\x9c\x89\xaa\x95\x9c\xe5~\xad\x00\x00\x00\x00\x00\x00\x00\x00\x00\x89o\x9b{\xb2&P\x17\xab\x02V9\xd3Ll\xd0R\xfe)\xbe\xe2\xa3\xa7q\x11V3&Rb(!\f\xc2E\x1ac\x827L\xbb*aMe\xec\xe0&,-\xf5\x96d\xb1\rgf9_\x00\xb7\xdeVo\x1e\xe4!a\x1b\xa9\xa9\xd2IA\x02\xb2\x93+g\x19_\xd4\r\xaa\x8eEU/k\xcb3\x00\xb2el\xd7\xa1\x13\xd3\xa2\xf9}\xc8RGz\a\xca\xc42\xc5\xecw\xc7\xe2\xf4\x11e\xe5\x85\f\xe3\xf7B\xe8\xe5\x00\x99\xe2}3\xe0\n\xfa\x808\r\x9f0\x1a\x82\xf5\x0f\xafy\xddc\xddd\xc7\x1b\xa6e\x02\xc5A\x9b\x025\xe2\xdc\xcd\xff\xf2;\xfb\xf6n\xdd\x83\t^\xa6\x0e', &(0x7f0000001a00)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000300000500000000000000000000"], 0xfffffffffffffe50, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffff9c) recvmsg$kcm(r0, &(0x7f0000001940)={&(0x7f00000001c0)=@rc, 0x80, &(0x7f0000001800)=[{&(0x7f0000000340)=""/77, 0x4d}, {&(0x7f00000003c0)=""/74, 0x4a}, {&(0x7f0000000500)=""/212, 0xd4}, {&(0x7f0000000240)=""/61, 0x3d}, {&(0x7f0000000440)=""/86, 0x56}, {&(0x7f0000000600)=""/50, 0x32}, {&(0x7f0000000640)=""/116, 0x74}, {&(0x7f00000006c0)=""/144, 0x90}, {&(0x7f0000000780)=""/66, 0x42}, {&(0x7f0000000800)=""/4096, 0x1000}], 0xa, &(0x7f00000018c0)=""/67, 0x43}, 0x3) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:35 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) r1 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x2, 0x200800) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f00000004c0)={0x0, @broadcast, @initdev}, &(0x7f0000000500)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000540)={r2, 0x1, 0x6, @dev={[], 0x22}}, 0x10) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r3, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r4 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000200)='/proc/capi/capi20ncci\x00', 0x10000, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000340)={0x1, 0x0, [{0x7000, 0xea, &(0x7f0000000240)=""/234}]}) bind$packet(r3, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r3, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r5, 0xc0905664, &(0x7f0000000080)={0x0, 0x0, [], @bt={0xaa20, 0x1, 0x3, 0x4, 0x9, 0x4, 0x8, 0x8}}) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) r2 = getpgid(0x0) syz_open_procfs(r2, &(0x7f0000000040)='net/if_inet6\x00') 13:32:36 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c00000000000000]}) 13:32:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f2b69b5468dab1d32d1106d4a826710d21f651816f3f431423eb5fd5f0b9d9a30776d0bef0631b715379385f061f59fe1f144473527508c3a756ce3ec11ec66a3871a7ace5d0b642c7695895bc668f01e71a6603f30c800c8a3c8facc756156fcf35ee796f513cff6e78301d8c0628891dd7e34335ce1235b6afb8b7a25e3a1b428c9a4bf"]) r3 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x40042) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f00000000c0)={r0, 0x0, 0xfffffffffffffd15, r3}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:36 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6}}, &(0x7f0000000240)=0xe8) mount$overlay(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x2000, &(0x7f0000000500)={[{@redirect_dir={'redirect_dir', 0x3d, './file0/file1'}}, {@lowerdir={'lowerdir', 0x3d, './file1'}}, {@xino_on='xino=on'}, {@index_on='index=on'}, {@index_off='index=off'}, {@xino_on='xino=on'}, {@xino_off='xino=off'}, {@index_off='index=off'}], [{@context={'context', 0x3d, 'user_u'}}, {@smackfsroot={'smackfsroot', 0x3d, 'keyring$^'}}, {@func={'func', 0x3d, 'MMAP_CHECK'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'GPLmime_type%'}}, {@measure='measure'}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fscontext={'fscontext', 0x3d, 'unconfined_u'}}]}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r1 = syz_open_dev$usbmon(&(0x7f0000000440)='/dev/usbmon#\x00', 0x1, 0x100) getpeername$unix(r1, &(0x7f0000000600)=@abs, &(0x7f0000000480)=0x6e) 13:32:36 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x4c00000000000000]}) 13:32:36 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6800000000000000]}) 13:32:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:36 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000142000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/vcs\x00', 0x0, 0x0) ioctl$KVM_SET_XCRS(r0, 0x4188aea7, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000db0000000300000000000010880000000000000003000000000000000300004b25156bdfd4d3777ecb417e3e1b5718fe8a7b3b3c534e751dc4c00a7d139aa0af4465e98bfdd682f8f878e978798a4fd5f960afc8b977e9b1fb63ccf79b06000000000000000000000000000000"]) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:36 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f0000000040)={0x3, r0}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:36 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6800000000000000]}) 13:32:36 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x4000) ioctl$DRM_IOCTL_MODE_GETCRTC(r0, 0xc06864a1, &(0x7f0000000340)={&(0x7f0000000200)=[0x3f, 0x9, 0x1ff, 0xffffffff, 0x3, 0x0, 0x46, 0x3, 0x6], 0x9, 0x5, 0x80, 0x2, 0x7, 0x4, {0x400, 0x7fff, 0x4, 0x4, 0x3, 0x6, 0x4, 0x100000, 0x6f, 0x2, 0x7fffffff, 0x0, 0x10000, 0x23ca866f, "d7a14e611d5194161d7896ad6493c79bfa81646079dd58dd5c808c4dba28d5ae"}}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f00000001c0)='./file0\x00', 0x2) 13:32:36 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c00000000000000]}) 13:32:36 executing program 3: mkdir(&(0x7f0000000700)='./file1\x00', 0x0) mkdir(&(0x7f0000000180)='./file0\x00', 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$PIO_UNIMAP(r0, 0x4b67, &(0x7f00000001c0)={0x6, &(0x7f0000000100)=[{0x429, 0xfff}, {0x3e3fd218, 0xffffffffffff8001}, {0xff, 0x3}, {0x6, 0x2}, {0x42e2, 0x4}, {0x1000}]}) mount$overlay(0x400000, &(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)='overlay\x00', 0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=./file1,workdir=./file1']) chdir(&(0x7f0000000280)='./file0\x00') mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$overlay(0x400000, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000000)='overlay\x00', 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB=',lowerdir=.:file0']) r1 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x0, 0x0) getdents64(r1, &(0x7f0000000340)=""/65, 0x41) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000200)=ANY=[@ANYBLOB="62ff0f7b4a7b16c01499c08e3812cc2239398ca2935e281ee127acdb21a8f0993ff5a1dd97fe6111871edcd6989c88581aaeff51ed040825"]) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:36 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x8, {0x5, 0x4, 0xffffffffffffffff, 0x70}}, 0x20) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:36 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x6c00000000000000]}) 13:32:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_EDID(r2, 0xc0285628, &(0x7f0000000100)={0x0, 0x4, 0x81, [], &(0x7f00000000c0)}) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:36 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7400000000000000]}) 13:32:36 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) r0 = geteuid() getresgid(&(0x7f0000000200), &(0x7f0000000240), &(0x7f0000000340)=0x0) lchown(&(0x7f00000001c0)='./file0\x00', r0, r1) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2654.109414][T29191] overlayfs: filesystem on './file0' not supported as upperdir 13:32:36 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000600)='./file0\x00', 0x3) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/dlm-control\x00', 0x20000, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000003c0)={@remote, @broadcast, 0x0}, &(0x7f0000000400)=0xc) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000340)='TIPC\x00') sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x8000004}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbff, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20040000) sendmsg$nl_route_sched(r0, &(0x7f0000000500)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)=ANY=[@ANYBLOB="400000002600010029bd7000ffdbdf2500000000", @ANYRES32=r1, @ANYBLOB="f6000fa68e0010000f00f9ff1a000a0004000a0004000a0004000a000400e40004000a0004010a00"], 0x40}, 0x1, 0x0, 0x0, 0x20008000}, 0x20008880) 13:32:36 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000040)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:36 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7400000000000000]}) [ 2654.154348][T28944] overlayfs: maximum fs stacking depth exceeded 13:32:36 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, &(0x7f0000000300)={@default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f00000000c0)={'nat\x00', 0x0, 0x4, 0x92, [], 0x0, &(0x7f0000000080), &(0x7f0000000200)=""/146}, &(0x7f00000002c0)=0x78) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:37 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a00000000000000]}) 13:32:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2a69"]) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x500, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f00000000c0)={0x0, @broadcast, @local}, &(0x7f0000000100)=0xc) setsockopt$inet6_IPV6_PKTINFO(r3, 0x29, 0x32, &(0x7f0000000140)={@empty, r4}, 0x14) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000480)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in=@dev, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @local}}, 0x0, @in=@multicast1}}, &(0x7f0000000440)=0xe8) syz_mount_image$xfs(&(0x7f0000000200)='xfs\x00', &(0x7f0000000240)='./file0/file0/file0\x00', 0x6, 0x2, &(0x7f0000000400)=[{&(0x7f0000000340)="3939bb7447c8ada7a00d2ab47a57244bfa30bb418a765c3d52c81acb4fe16548801e653974d2c5a92baac43d817059feb4f2cf90a51f8b9ec4a9433c2cd89771c3d95cca0e54c5d333c62a0e3edb982ab9d65b03474d668065e33b433a86cb53599b2de2221f7ec1", 0x68, 0x8000000000000}, {&(0x7f00000003c0)="d3a11bcf15ee2e34d63e2eb2391530ce13bebf6526f1ca50f9a7b75e99cb2995c41e0d8807557b", 0x27, 0x100000000}], 0x100000, &(0x7f0000000600)={[{@prjquota='prjquota'}, {@sysvgroups='sysvgroups'}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@pcr={'pcr', 0x3d, 0x3e}}, {@uid_lt={'uid<', r0}}, {@obj_role={'obj_role', 0x3d, '\x00'}}, {@dont_measure='dont_measure'}, {@subj_role={'subj_role'}}, {@fsuuid={'fsuuid', 0x3d, {[0x77, 0x35, 0x39, 0x77, 0x61, 0x66, 0x63, 0x65], 0x2d, [0x65, 0x62, 0x62], 0x2d, [0x65, 0x67, 0x65, 0x7a], 0x2d, [0x63, 0x37, 0x0, 0x7f], 0x2d, [0x63, 0x37, 0x33, 0x66, 0x39, 0x61, 0x7f, 0x61]}}}]}) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0)='TIPCv2\x00') mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:37 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x7a00000000000000]}) 13:32:37 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) 13:32:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) r2 = geteuid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000f40)={0x0, 0x0, 0x0}, &(0x7f0000000080)=0xc) fstat(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r5 = getegid() fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getgid() getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@empty}}, &(0x7f0000000300)=0xe8) stat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@loopback, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000500)=0xe8) getresgid(&(0x7f0000000540)=0x0, &(0x7f0000000580), &(0x7f00000005c0)) fstat(r1, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) r13 = getegid() r14 = getuid() fstat(r1, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000700)={{{@in=@local, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@local}}, &(0x7f0000000800)=0xe8) getgroups(0x8, &(0x7f0000000840)=[0x0, 0xffffffffffffffff, 0xee00, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01, 0x0]) r18 = getuid() ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000000040)={0x8, 0x7, 0x9f3, 0xf068, 'syz1\x00', 0x48dcf2ab}) getresgid(&(0x7f0000000880), &(0x7f00000008c0), &(0x7f0000000900)=0x0) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000940)={0x5f0, 0x0, 0x5, [{{0x0, 0x1, 0x91, 0x8, 0x40, 0x800, {0x5, 0xcc0, 0x5, 0x109, 0x80000000, 0x1f9d, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x9, 0x8, r2, r3, 0x1000, 0x7}}, {0x2, 0x10001, 0x8, 0x800, 'pagemap\x00'}}, {{0x1, 0x2, 0xb6, 0x100000000, 0x40000000000000, 0x9, {0x0, 0x400000000, 0x0, 0x3, 0x4, 0x81, 0x8, 0x1db, 0x80, 0x3, 0x1, r4, r5, 0x1f, 0xffff}}, {0x2, 0x3b, 0xa, 0x1, '/dev/cuse\x00'}}, {{0x3, 0x3, 0x9, 0x6, 0x4, 0xd1f, {0x0, 0x4, 0x1d, 0x800, 0xc40, 0x7, 0x8, 0x0, 0x1, 0x4, 0x2c, r6, r7, 0x3, 0x7}}, {0x1, 0x1c, 0x20, 0x5, 'keyring+keyringtrusted.selfwlan1'}}, {{0x3, 0x2, 0xfffffffffffffff7, 0x10d2, 0x92, 0x3, {0x0, 0x3, 0x8001, 0x4, 0x3, 0x21228b04, 0x7, 0x0, 0xf63c, 0x100, 0x8, r8, r9, 0x7ff, 0x100000000}}, {0x1, 0x80, 0x0, 0x1ff}}, {{0x1, 0x2, 0x9, 0x100000001, 0x7f, 0xc2, {0x6, 0x8, 0x40, 0xfffffffffffffff9, 0xf1, 0x59e5e947, 0x1, 0x1, 0x468, 0x6, 0x0, r10, r11, 0x3ff, 0x94}}, {0x3, 0x100, 0x8, 0xbd4, 'pagemap\x00'}}, {{0x0, 0x2, 0x1f, 0x4, 0x1, 0x0, {0x0, 0x5, 0xe0b7, 0x1, 0x5, 0x8, 0x7, 0x1, 0x100, 0x5, 0x773, r12, r13, 0x5, 0x3}}, {0x4, 0xa01, 0x8, 0x7, 'pagemap\x00'}}, {{0x2, 0x2, 0x6ac, 0x3, 0x1ff, 0x0, {0x3, 0x1, 0xb7be, 0x8, 0x81e, 0xa5, 0x1, 0x4, 0x8000, 0x1, 0x2, r14, r15, 0x2, 0x6}}, {0x3, 0x200, 0x13, 0x5, ':cgroupproctrusted-'}}, {{0x5, 0x0, 0x0, 0x9, 0xffffffff, 0x0, {0x5, 0x9, 0x81, 0xff, 0x74, 0xfffffffffffffffa, 0x5, 0x100, 0x1, 0x3, 0x3, r16, r17, 0x9, 0x7ff}}, {0x5, 0x6, 0x20, 0x100000000, '[md5sumbdevvboxnet0vboxnet0eth0('}}, {{0x3, 0x3, 0x400, 0xffffffff, 0xfffffffffffffffa, 0x2, {0x4, 0x3, 0x9, 0xfffffffffffffffd, 0x0, 0x5, 0x2, 0xfffffffffffffc00, 0x17ea, 0x81, 0xdc37, r18, r19, 0x8001, 0x100}}, {0x5, 0x8, 0x8, 0x8, 'pagemap\x00'}}]}, 0x5f0) 13:32:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000002300000000000000000000"], 0x24, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) ioctl$VIDIOC_QBUF(r0, 0xc058560f, &(0x7f0000000340)={0x62a, 0x7, 0x4, 0x4000, {r1, r2/1000+30000}, {0x1, 0xd, 0x0, 0x2, 0x72b5517e, 0xfffffffffffffffc, "06103dae"}, 0x101, 0x3, @userptr=0x8, 0x4}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) r1 = syz_open_dev$vbi(&(0x7f00000003c0)='/dev/vbi#\x00', 0x0, 0x2) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000400)={0x0, 0x60}, &(0x7f0000000440)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000004c0)={r2, 0xeb6}, 0x8) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sloppy_sctp\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r3, 0xc0945662, &(0x7f0000000200)={0x4, 0x0, [], {0x0, @reserved}}) r4 = socket(0x11, 0x0, 0x4010000) mount$9p_virtio(&(0x7f00000000c0)='!})vboxnet1\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)='9p\x00', 0x200000, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=virtio,fsm\a\x00ic=0x0000000,func=BPRM_CHECK,subj_user=,\x00']) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r4, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000380)={&(0x7f0000000340)='./file0\x00', r3}, 0x10) setsockopt(r4, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:37 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x2]}) 13:32:37 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}) 13:32:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) socket(0xa, 0x3, 0x905) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$VIDIOC_SUBDEV_S_CROP(r0, 0xc038563c, &(0x7f0000000040)={0x1, 0x0, {0x200, 0x80, 0x5e6, 0x101}}) 13:32:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x200080, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f00000000c0)={0x0}) ioctl$DRM_IOCTL_NEW_CTX(r3, 0x40086425, &(0x7f0000000100)={r4, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) ioctl$VIDIOC_EXPBUF(0xffffffffffffff9c, 0xc0405610, &(0x7f00000001c0)={0x2, 0x0, 0x80000001, 0x800, 0xffffffffffffffff}) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000340)={{{@in, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in=@multicast1}}, &(0x7f0000000240)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000500)={{{@in=@local, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@initdev}}, &(0x7f0000000440)=0xe8) fstat(0xffffffffffffff9c, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) getresuid(&(0x7f0000000480)=0x0, &(0x7f0000000700), &(0x7f0000000740)) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000780)={0x0, 0x0}, &(0x7f00000007c0)=0xc) r7 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000800)={{{@in=@remote, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@initdev}}, &(0x7f0000000900)=0xe8) getresuid(&(0x7f0000000940), &(0x7f0000000980)=0x0, &(0x7f00000009c0)) lstat(&(0x7f0000000a00)='./file0/file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000ac0), &(0x7f0000000b00)=0x0, &(0x7f0000000b40)) getresgid(&(0x7f0000000b80)=0x0, &(0x7f0000000bc0), &(0x7f0000000c00)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r13 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000e80)='/dev/cachefiles\x00', 0x0, 0x0) getsockopt$sock_cred(r13, 0x1, 0x11, &(0x7f0000000e40)={0x0, 0x0, 0x0}, &(0x7f0000000e00)=0xc) socketpair(0x8, 0x80007, 0x5, &(0x7f0000000f80)={0xffffffffffffffff}) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001000)='TIPCv2\x00') sendmsg$TIPC_NL_LINK_RESET_STATS(r15, &(0x7f0000001200)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x104001}, 0xc, &(0x7f00000011c0)={&(0x7f0000001040)={0x174, r16, 0x110, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_LINK={0x2c, 0x4, [@TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x14, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x14, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x3}]}, @TIPC_NLA_BEARER={0xd0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8001}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xa65}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x100000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x29}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffffffffffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffff9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6556}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e22, @broadcast}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x8, @mcast2, 0x9}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1b}}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x80000001, @loopback, 0x7fffffff}}}}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_SOCK={0x18, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7f}]}, @TIPC_NLA_MON={0x24, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xff}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x804}, 0x40040c4) fsetxattr$system_posix_acl(r0, &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000cc0)={{}, {0x1, 0x2}, [{0x2, 0x1, r1}, {0x2, 0x4, r2}, {0x2, 0x4, r3}, {0x2, 0x1, r4}, {0x2, 0x2, r5}, {0x2, 0x2, r6}, {0x2, 0x2, r7}, {0x2, 0x2, r8}, {0x2, 0x4, r9}], {0x4, 0x1}, [{0x8, 0x1, r10}, {0x8, 0x3, r11}, {0x8, 0x5, r12}, {0x8, 0x1, r14}], {0x10, 0x3}, {0x20, 0x6}}, 0x8c, 0x1) 13:32:37 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x3]}) 13:32:37 executing program 4: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240)='/dev/sequencer2\x00', 0x0, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000340)={&(0x7f0000000000)='./file0/file0\x00', r0}, 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000380)={0x0, @in={{0x2, 0x4e21, @broadcast}}, [0x101, 0x5e, 0x6, 0x9, 0x4, 0x9, 0x1, 0x3f, 0x4, 0x2705, 0x0, 0x7f, 0x4, 0xffff, 0x10001]}, &(0x7f0000000480)=0x100) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000500)={r1, 0x7}, &(0x7f0000000540)=0x8) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="0200000001110000000000b1fa7aa428070091926b551b09eaa1af88c4000000000000001000000000000000200000000000000038a943e0bc2a2e9f43ec145171d781f4b9b56182cc4629fe5af33ebf869f"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) ioctl$SNDRV_CTL_IOCTL_ELEM_REMOVE(r0, 0xc0405519, &(0x7f0000000580)={0x7, 0x1, 0x1c0000000000000, 0x0, 'syz1\x00', 0x783}) 13:32:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0xebf) r1 = getpgid(0x0) syz_open_procfs(r1, &(0x7f0000000040)='projid_map\x00') 13:32:37 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) 13:32:37 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000400)='./file0/file0\x00', &(0x7f00000003c0)='security.selinux\x00', 0x0, 0x136, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f00000000c0)={0x0, 0x0}) move_pages(r0, 0x4, &(0x7f0000000200)=[&(0x7f0000ffe000/0x2000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffe000/0x2000)=nil], &(0x7f0000000240)=[0x9, 0x846, 0xfff, 0x9], &(0x7f0000000340)=[0x0], 0x6) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0xfffffffffffffffe, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x100, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000028000/0x1000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0f2b117f398e36abb1b0c77a69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:37 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:37 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0xfffffffffffffd62) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:37 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4]}) 13:32:37 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000007ffffffc) write(r1, &(0x7f0000000040)="aeb5dd4138ef5ef832eac489f0f6be1cdd872b9eb53135077dbe838b459c379201315be5c44c3ca151771b6e832b3f389114779cb7f7fb0e3e61152539b1291b40f50a333bc6ad8ad77725c36225806a00ff6a0793c635343dd3adde4fbf5f0a9cdf6ac275d482354aa4c54f930330b7ff9bf34b501469d4325488e42797ade0645c60326d0f85b94a9e02849afc4f98fe4ef7d5899b5d7f1b4fb74d19de1e48e9fb5d6dfbd77592da5fd7789cd13b4a2b89af45a8cd7821bce7004e18a4c0abad47273a91db72c7fb", 0xc9) fcntl$notify(r0, 0x402, 0xe) 13:32:37 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}) 13:32:38 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000500)='/dev/vfio/vfio\x00', 0x60000, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r0, 0x0, 0x1, &(0x7f0000000540)=0x7, 0x4) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000340)=0xc) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x80000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0xf19}}, {@mode={'mode', 0x3d, 0x6}}, {@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x4}}, {@mode={'mode', 0x3d, 0x100}}, {@mode={'mode', 0x3d, 0x10001}}, {@mode={'mode', 0x3d, 0x8001}}], [{@fowner_lt={'fowner<', r1}}, {@audit='audit'}, {@dont_hash='dont_hash'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@measure='measure'}]}) 13:32:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/btrfs-control\x00', 0xc0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xc0) ioctl$CAPI_SET_FLAGS(r3, 0x80044324, &(0x7f0000000080)=0x1) 13:32:38 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/rfkill\x00', 0x8000, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000200)='/dev/input/mice\x00', 0x0, 0x4c082) fanotify_mark(r0, 0x18, 0x8000000, r1, &(0x7f0000000240)='./file0\x00') 13:32:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x5]}) 13:32:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}) 13:32:38 executing program 5: r0 = gettid() r1 = syz_open_procfs(r0, &(0x7f0000000080)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000040)={0x80000001, 0x200, 0x8, 0x0, 0x0, 0x3, 0x3, 0xff, 0x8, 0xf0, 0x9c, 0x7fff, 0x0, 0x7, 0x39aa8b82, 0x101, 0x8, 0x5, 0x3}) 13:32:38 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x32, 0x4) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x6) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket(0x11, 0x80002, 0x0) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0xc5) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @broadcast}, 0xfffffffffffffd62) sendmmsg(r0, &(0x7f0000004e00)=[{{0x0, 0x0, &(0x7f0000001f80), 0x243, &(0x7f0000001fc0)}}], 0x400000000000047, 0x0) 13:32:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6]}) 13:32:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r3 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7f, 0x0) ioctl$VHOST_RESET_OWNER(r3, 0xaf02, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:38 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xffffffffffffffea, 0x4) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="0200e200010000f45858a263872c58f4b28531bd42800000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000200)='system.posix_acl_access\x00', &(0x7f0000000080)={{}, {0x1, 0x40000000000000}, [], {}, [], {}, {0x20, 0x2}}, 0x24, 0x1) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) 13:32:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x1, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@version_L='version=9p2000.L'}, {@access_client='access=client'}, {@cachetag={'cachetag', 0x3d, 'posix_acl_access:,&em1'}}, {@afid={'afid', 0x3d, 0x9}}], [{@dont_measure='dont_measure'}]}}) 13:32:38 executing program 4 (fault-call:2 fault-nth:0): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7]}) 13:32:38 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000500)={{{@in=@remote, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@empty}}, &(0x7f0000000400)=0xe8) mount$9p_rdma(&(0x7f0000000080)='127.0.0.1\x00', &(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000240)='9p\x00', 0x108000, &(0x7f0000000600)={'trans=rdma,', {'port', 0x3d, 0x4e22}, 0x2c, {[{@sq={'sq', 0x3d, 0x4}}, {@rq={'rq'}}, {@sq={'sq', 0x3d, 0x7}}], [{@euid_gt={'euid>', r0}}, {@subj_user={'subj_user', 0x3d, 'system.posix_acl_default\x00'}}, {@smackfsroot={'smackfsroot', 0x3d, 'security.selinux\x00'}}, {@obj_type={'obj_type', 0x3d, 'system.posix_acl_default\x00'}}, {@euid_eq={'euid', 0x3d, r1}}, {@subj_type={'subj_type', 0x3d, 'security.selinux\x00'}}, {@subj_role={'subj_role', 0x3d, 'system.posix_acl_default\x00'}}, {@subj_role={'subj_role', 0x3d, 'security.selinux\x00'}}]}}) lsetxattr$security_selinux(&(0x7f0000000200)='./file0/file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x389b3181eb0838aa, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) r3 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000080)='/proc/capi/capi20ncci\x00', 0x40000, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r3, 0x54a2) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x7f) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ubi_ctrl\x00', 0x400000, 0x0) 13:32:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]}) 13:32:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:38 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0xdf, 0x80) ioctl$KDSKBMODE(r0, 0x4b45, &(0x7f0000000200)=0x100000001) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:38 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x48]}) 13:32:38 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000140)=ANY=[@ANYBLOB="0fad30d15c7e34d0771e32147bf2399b6d455932361dfebf60fdc0e266e4662b31eff7b34e172a964f6a35fbbe3d00eda41c2802d44fbef97678f60384722a594a1335168254539ad69c583809901387834c28c0a4fca88c14"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) r3 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x10000, 0x0) timerfd_settime(r3, 0x1, &(0x7f00000000c0)={{0x0, 0x989680}, {0x0, 0x1c9c380}}, &(0x7f0000000100)) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000040)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x2c) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000200)={r4, 0x1, 0x1}, 0x8) 13:32:38 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$sock_bt_bnep_BNEPGETCONNLIST(r0, 0x800442d2, &(0x7f0000000000)={0x7, &(0x7f0000000200)=[{0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @remote}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @local}]}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:38 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:38 executing program 1: r0 = openat$random(0xffffffffffffff9c, &(0x7f0000000440)='/dev/urandom\x00', 0x88000, 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000480)={0x0}, &(0x7f00000004c0)=0xc) fcntl$setownex(r0, 0xf, &(0x7f0000000500)={0x1, r1}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/audio\x00', 0x20403, 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000400)='/proc/capi/capi20\x00', 0x400000, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000200)={&(0x7f0000ffb000/0x3000)=nil, 0x3000}, &(0x7f0000000240)=0x10) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0800000009707e8dcd5b46e3c8a5ea0ff1450100133ad0d8207654e7a1b8b421b48148821f010093d37b9520c50129d6cf9f23b1769bdab36545eb33d17e7e0b69e9cc00000000000000007d85103d03df0883262bf7f3c31cd544b302dc4214ff6f76e27bb68ed5c4", @ANYRES32=0x0, @ANYBLOB="104fa9bff0eaf0922000000000000000"], 0x5, 0x2) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) epoll_ctl$EPOLL_CTL_DEL(r3, 0x2, r2) 13:32:38 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]}) 13:32:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendfile(r1, r2, 0x0, 0x4) ioctl$RTC_AIE_ON(r0, 0x7001) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x2000)=nil, 0x2000}, 0xfffffffffffffffe}) 13:32:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB]) getresuid(&(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000100)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c]}) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x4}}, 0x24, 0x2) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000200)='./file0/file0\x00', 0x84) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010950035e61f00000000002000e0010eebe46a6a0e000000"], 0x24, 0x0) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240), &(0x7f0000000300)=0x4) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:39 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]}) 13:32:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) iopl(0x200) sendfile(r0, r0, 0x0, 0x10000007ffffffc) 13:32:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x3, 0x111000) getsockopt$inet_buf(r3, 0x0, 0x28, &(0x7f0000000300)=""/4096, &(0x7f00000000c0)=0x1000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x68]}) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000000003ffffea0000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) socketpair(0x5, 0x80005, 0x2, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r0, 0x6, 0x15, &(0x7f0000000200)=0x4, 0x4) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x101082, 0x0) ioctl$BLKZEROOUT(r1, 0x127f, &(0x7f0000000340)={0x2, 0x3}) 13:32:39 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]}) 13:32:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) [ 2656.661804][ C1] net_ratelimit: 2 callbacks suppressed [ 2656.661811][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.673174][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.678973][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.684745][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c]}) 13:32:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) fcntl$F_SET_RW_HINT(r0, 0x40c, &(0x7f0000000080)=0x1) lseek(r1, 0x0, 0x2) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cachefiles\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r3, 0x84, 0x20, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000001c0)='system.posix_acl_default\x00', &(0x7f0000000000), 0x24, 0x2) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = accept4$ax25(0xffffffffffffff9c, &(0x7f0000000200)={{0x3, @null}, [@null, @netrom, @netrom, @null, @null, @bcast, @netrom, @rose]}, &(0x7f00000002c0)=0xfffffffffffffe5c, 0x800) truncate(&(0x7f0000000400)='./file0\x00', 0x2a) ioctl$sock_netdev_private(r0, 0x89f0, &(0x7f0000000340)="39ebbfa45a93500765b6d46e3ce84e8ca79e450d50cbc24c7a4982f278a05ca706412d99f0609c934e035cba564790f14e5b34de0345ababbdcbac1260c9e8b5c836ee71a94b98d0644eb629d1c45c33af4c072b5422c5a5cb36864749e1347ddd2fdb6586dc2d84fb2bf69d57365765221b2def89e3847c9585ff644c00a225c1913d7672718c919ea176a97c94a19b60e40a8d32b34b348fc036558b77188a686dfd30755cca27096f4a69504d8d39") 13:32:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:39 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x74]}) 13:32:39 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x74]}) [ 2656.901796][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.907589][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.913391][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.919114][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2656.924939][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2656.930675][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$dmmidi(&(0x7f00000001c0)='/dev/dmmidi#\x00', 0x2, 0x141000) ioctl$SG_GET_SG_TABLESIZE(r0, 0x227f, &(0x7f0000000200)) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:39 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) getsockopt$netrom_NETROM_T1(r0, 0x103, 0x1, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="578c88a14384993818e3dfeebdf9d974eb8611fa9de3eb38ec6afe55dd7b6fccdce4f7ea1333aed7fcdddbc4e52a0da5c702d0b980d8fba56081db8466ed30df6d19a613b08d0ce2a3012faf5881da66d2af404574d3c116c29efe869d058707d4c1e4095ca844d33401b8895bc6da17d4dcb7ce603695b55cc5718e9f366c44c0776dd02dc0f1e41f6ab56c007709d3d99a793ca7ffc48328124b5b40e589a56d3848c423fc31ff68dc550a377a34733c17e7b58d109638703327e7637453f62ba9e2a366b462f8bb2704464e8e30", @ANYRES32=0x0, @ANYBLOB="cca24e3b10000c240000030000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:39 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x80000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000280)=""/21) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000100)=0x10000) r3 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vsock\x00', 0x200, 0x0) modify_ldt$write(0x1, &(0x7f0000000400)={0xfffffffffffffff7, 0x100000, 0xffffffffffffffff, 0x0, 0xffffffffffffff7f, 0x7, 0xbf07, 0xffffffffffff0001, 0x1, 0x5}, 0x10) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000300)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@mcast1}}, &(0x7f0000000140)=0xe8) setfsuid(r4) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r3, 0xc034564b, &(0x7f00000000c0)={0x3, 0x0, 0x1, 0x0, 0x1, @stepwise={{0x5, 0x9}, {0x80000000, 0x9}, {0x7ff, 0x1}}}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000440)=ANY=[@ANYBLOB="2f8500fb7df2375526f82bd8bd98fc5e0abeeae5261ae176f61c7b5e6954309904882ea8be58c78231aeadb7cb282fc6e1fa20530bb677702a8907414eaee8ee4fce253d3547d1fd8b031e4c803eb0ca0623f541503def127bec3f92eae3aa9e05debd5dbc7312921e9036a9a5437b0ba70e469a26acc6f6f5faa26ee95441133c046d95a46c2046c00000000000000021e80488012ffa91dd8539363c6f45431d64bc187431c749dbe2ba1b6350767922f3c30300"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000001c0)={[0x3, 0x7ff, 0x20, 0x1, 0x5, 0x51697bc3, 0x8001, 0xb957, 0x7, 0x9, 0x1, 0x8, 0x3, 0x7, 0x888, 0x9], 0xd000, 0x2000}) ioctl$RTC_AIE_ON(r3, 0x7001) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r3, 0x3, 0x100000001, r3}) 13:32:39 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a]}) 13:32:39 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a]}) 13:32:39 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:39 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0800000060fd19700509704c396c97254291b78a651687b3ae263377c3a8a400730c1ea0fead49d6538636ef9e7274babe6d4565b7a9135fab2b6b84edea50efc1d83b3d2b08176a21f247b6d57f29207fcf536441d113e6f59cc11a1d6b4aa9bc3c31ccf7df7f3aa2f8aa595b38caae4f138f784136a39dc121ea910da4256479c8cf4afa383754dbec382c214e1009bb48026b8f43b847af423dab8dba91e05363c8c4f69c8f5fee67f7b3b23c866a1fce026da363259ebcc7f0e281e9", @ANYRES32=0x0, @ANYBLOB="10000000000000002000040000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2657.203993][ T1561] Unknown ioctl -1070311861 [ 2657.246259][ T1561] Unknown ioctl 28673 13:32:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) getresuid(&(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)=0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in6=@mcast2, @in6=@empty, 0x4e24, 0x40, 0x4e21, 0xffffffffffffffff, 0xa, 0xa0, 0x80, 0xef, 0x0, r3}, {0x8, 0xffff, 0x20, 0xffffffffffffffba, 0x6, 0x5d02, 0x0, 0x64}, {0x80000000, 0x6, 0x81, 0x2}, 0x8000, 0x6e6bb1, 0x1, 0x0, 0x0, 0x3}, {{@in6=@rand_addr="3d8e4304a3165cd93df6f764b2e6d964", 0x4d2, 0x3e}, 0xa, @in6=@initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x0, 0x0, 0x3, 0xfffffffffffffffa, 0x7, 0x7fff, 0x17}}, 0xe8) 13:32:40 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)='security.selinux\x00', 0x0, 0xfffffffffffffeac, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) symlink(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='./file0/file0\x00') chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2657.288624][ T1769] Unknown ioctl -1070311861 [ 2657.304191][ T1561] Unknown ioctl 28673 13:32:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]}) 13:32:40 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x300]}) 13:32:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:40 executing program 1: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000340)='/dev/null\x00', 0x8000, 0x0) ioctl$SIOCSIFMTU(r0, 0x8922, &(0x7f0000000380)={'veth0_to_bridge\x00', 0x7}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rfkill\x00', 0x400, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x9, 0x3, 0x320, 0x0, 0x0, 0xf8, 0x0, 0xf8, 0x250, 0x250, 0x250, 0x250, 0x250, 0x3, &(0x7f0000000200), {[{{@ipv6={@dev={0xfe, 0x80, [], 0x19}, @mcast1, [0xffffffff, 0xffffff00, 0xffffffff], [0xffffffff, 0x0, 0xffffffff, 0xffffffff], 'nr0\x00', 'teql0\x00', {}, {}, 0xfd, 0x870, 0x2, 0x20}, 0x0, 0xc8, 0xf8}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0x80000000, 0x97, 0x1}}}, {{@ipv6={@ipv4={[], [], @empty}, @local, [0xffffffff, 0xff000000, 0xffffffff, 0xff], [0xffffffff, 0xffffff00, 0x0, 0xff000000], 'team0\x00', 'bridge_slave_0\x00', {}, {}, 0x9d, 0x101, 0x0, 0x10}, 0x0, 0x120, 0x158, 0x0, {}, [@common=@ah={0x30, 'ah\x00', 0x0, {0x4d2, 0x4d2, 0x1000, 0x2, 0x2}}, @inet=@rpfilter={0x28, 'rpfilter\x00', 0x0, {0x4}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x0, 0xd4e}, {0x1, 0xf0, 0x3}, {0x20, 0x7ff}, 0x7, 0x40e2838b}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f00000003c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f0000000400)={r2}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) bind$isdn_base(r1, &(0x7f00000001c0)={0x22, 0x8001, 0x0, 0x7, 0x400000008000000}, 0x6) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) read(r1, &(0x7f0000000040)=""/243, 0xf3) 13:32:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) 13:32:40 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = socket$kcm(0x10, 0x80000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)="2e0000001d008100e00f80ecdb4cb90406c8650407007400000000fb120003002b00000040d819a9060015100000", 0x2e}], 0x1}, 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f00000001c0)=ANY=[], 0x0, 0x400000) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:40 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x500]}) [ 2657.676380][ T2505] netlink: 'syz-executor.1': attribute type 116 has an invalid length. [ 2657.712085][ T2505] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 13:32:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x600]}) [ 2657.745031][ T2622] netlink: 'syz-executor.1': attribute type 116 has an invalid length. 13:32:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:40 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="1000000000a9aaf04bb490439f000080"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0, 0x0}, &(0x7f0000000200)=0xc) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000340)={{}, {}, [], {0x4, 0x2}, [{0x8, 0x4, r0}, {0x8, 0x4, r0}, {0x8, 0x6, r0}, {0x8, 0x1, r0}, {0x8, 0x3, r0}, {0x8, 0x2, r0}, {0x8, 0x4, r0}, {0x8, 0x1, r0}]}, 0x64, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r1 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x1, 0x2) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000400), &(0x7f0000000440)=0x4) r2 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) linkat(r1, &(0x7f0000000240)='./file0/file0\x00', r2, &(0x7f00000003c0)='./file0\x00', 0x0) [ 2657.820892][ T2622] netlink: 'syz-executor.1': attribute type 3 has an invalid length. 13:32:40 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x600]}) 13:32:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x700]}) 13:32:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') connect(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x11}}, 0x2}}, 0x80) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000040), 0x2) socket$alg(0x26, 0x5, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000000)={0x1000}, 0x4) 13:32:40 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="c7b3bc6c00c11cd400694ca9bf9298030854d99b615ad7b36b7e8548fdc27f3b413935b37d856fb2fb863220d9dea2a0fa766b481cadae2ea72244959b6e4d4137ff8bcb6a60542cd9b211ce4c", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0/file0\x00'}, 0x10) 13:32:40 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:40 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x700]}) 13:32:40 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f0000000200)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:40 executing program 5: r0 = syz_open_dev$vcsa(&(0x7f00000000c0)='/dev/vcsa#\x00', 0x3, 0x800) ioctl$BLKPG(r0, 0x1269, &(0x7f0000000300)={0xffffffff, 0x5149, 0xfffffffffffffe3d, &(0x7f0000000100)="bbf1c2762a8726c2f694adf99f1dd24f99d175ef10bb1a7f0d9f9d4c38fb6e2a0a03717b7867268701425b2610828aa41ed5ca65528e3783700785cb3024f937a3ae300f78c8b1468b55600e93193ea182c4a6fca57cf7180df4fbc7910ad3561e1b0dc63e9d9ee3f1f4540800000000000000378020f62954156ac05aad5d1c28f8211531ac7a9d16f20b15d7632f91688b49a8b602009fcb22778ffcf067ba789e3fae7911e39f8beea23687"}) ioctl$UI_BEGIN_FF_ERASE(r0, 0xc00c55ca, &(0x7f0000000240)={0x7, 0x1, 0xff}) openat$nullb(0xffffffffffffff9c, &(0x7f0000000280)='/dev/nullb0\x00', 0x1, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r0, 0xc0c85666, &(0x7f0000000340)={{0x0, @name="cf27f4f1b09f1f228cf7310749851fcf11609e098280210e61c089a61b8acf79"}, "9b3f841f98a5e1ac19cf0969eb11c167feea7d16fe5e0340c330e8b55c9163f5", 0x2}) r1 = syz_open_dev$media(&(0x7f0000000040)='/dev/media#\x00', 0x1, 0x0) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f0000000080)=0x2000) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') syz_open_dev$audion(&(0x7f00000002c0)='/dev/audio#\x00', 0x2, 0x200) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x10000007ffffffc) 13:32:40 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800]}) 13:32:40 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) sched_setscheduler(r3, 0x0, &(0x7f00000000c0)=0x401) 13:32:41 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000208000000ca17dba8fe900e07e7ea30641e221c2de0b0ec277b1c494c7f9900abe75bc0ee6af1e7aca5", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='net/dev_snmp6\x00') ioctl$VIDIOC_G_DV_TIMINGS(r0, 0xc0845658, &(0x7f0000000340)={0x0, @reserved}) chmod(&(0x7f0000000400)='./file0/file0\x00', 0x2081) 13:32:41 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800]}) 13:32:41 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000300)) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000400)=ANY=[@ANYBLOB="a5b27369894bec683da8acd47e8f50e5bd42053945c5adf1fa87b6055812525216fc5305826a17425cb3a1ca96ed7dbbd0e0856adab8240971fb7f9ebd1bba3d040ddedb511c8286fef9a0866c1616e480fc21ee988f62f0fb9340f636be0e3575b50fc6c73b27d158450366e4aa1130416ed14cd8b28b45a0f1944a691f91b71691c85a78803690fa787011f00f95f9248b3db88fcc92e95c6496e8d5e85692091d99b614804be7cea05b4b7630268ca61167a42b018d05d58df23242331e0c0000000000000000"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KDSKBMODE(r1, 0x4b45, &(0x7f0000000080)=0xfffffffffffffff8) io_setup(0xee, &(0x7f00000000c0)=0x0) io_cancel(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x5, 0x9, r2, &(0x7f0000000100)="349753552e50a640087fa29734f14ee79dea52f978a5fd1f8475a77873c10eaf19bc03f739717bfd16c2f15fff1a3c17fe8a2e9db76657d4dbef0f6317b0e42ca711f24565aaac9b73f255df0c51185a02ff30a31de67e7406a4b4e30b6cf6d1de5a4af2b3dad9be3012776cb5e38283e6aada2a072803bca41afb30ef7fbc9b1a7219f6b9d50725e9e354cd0a3d130c2d3fdee4b92637d7e57b05d225c5082a3789ac44be9d5a061cc48b57aee7cee231b23d1bb39ede7d9ef62cdfb50c1c6132be669374e1c004c81c89ca8290e030a897aa1b848a7babe9748b1d5ea29a32415295522185e9752453f53feeacdc6713fe84d3d7182cef6b", 0xf9, 0x4, 0x0, 0x1}, &(0x7f0000000240)) 13:32:41 executing program 5: ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='mounts\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:41 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/mISDNtimer\x00', 0x10800, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00]}) 13:32:41 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00]}) 13:32:41 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000001010000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x1) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$SG_GET_NUM_WAITING(r0, 0x227d, &(0x7f0000000000)) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) write$UHID_GET_REPORT_REPLY(r0, &(0x7f0000000040)={0xa, 0x2, 0x8, 0x101}, 0xa) keyctl$session_to_parent(0x12) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) 13:32:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800]}) 13:32:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x5, 0x10000000000000, 0x0, 0x2000, &(0x7f0000031000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000100)=ANY=[@ANYBLOB="0f2b695f1f1871ba4b2c03ceebbb9a09f26db9f026996d3b3cba97356cc4505c476fab39e4c343b6d167e08f5fa9159f5c3bd411d3b2a994887290e2e4cc92791ba2c94cd60725359d0c87ea6a52825629aa1fc1fe4bd6bbe4d41aa623d9fe0fd778da395f9c7d32092fb8791eb2767689dc03000de1861936b885f644b49be753f5ca889ec508ab776d9d47c7549b9f3cac53e1232e89c6ce69c9c76ccaee3ec3786d895ff43bad64a2"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_open_dev$binder(0xfffffffffffffffe, 0x0, 0x802) 13:32:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f0000000000)=0x200, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000440)='highspeed\x00', 0xa) lsetxattr$trusted_overlay_opaque(&(0x7f00000000c0)='./file0\x00', &(0x7f00000001c0)='trusted.overlay.opaque\x00', &(0x7f0000000280)='y\x00', 0x2, 0x3) bind$inet(r0, &(0x7f00000003c0)={0x2, 0x200000000004e23, @rand_addr=0x2}, 0x10) r1 = openat$zero(0xffffffffffffff9c, 0x0, 0x400200220200, 0x0) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000000), 0xc) chroot(&(0x7f0000000300)='./file0\x00') r2 = socket$inet6(0xa, 0x3, 0x7) listen(r2, 0x2) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000340)={0x2, 0xffffffffffffffff, 0x1}) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f00000008c0)={0x2, 0x4e23, @local}, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f0000000380), &(0x7f0000000740)=0x40) sendmmsg(r1, &(0x7f0000000e80)=[{{&(0x7f0000000680)=@tipc=@nameseq={0x1e, 0x1, 0x2, {0x0, 0x1, 0x1}}, 0x80, 0x0}}], 0x1, 0x4000000) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) getgroups(0x1, &(0x7f00000007c0)=[0xffffffffffffffff]) stat(&(0x7f0000001000)='./file0\x00', &(0x7f0000001040)) recvmsg(r0, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0xf012, &(0x7f0000000180)=[{&(0x7f0000003ac0)=""/4096, 0xdc00}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) write$binfmt_elf64(r0, &(0x7f0000002300)=ANY=[@ANYRES64], 0x1000001bd) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000900)={{{@in6=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000140)=0xe8) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000400)={r3, 0x1, 0x6, @random="67223fcabf90"}, 0x10) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) clock_gettime(0x6, &(0x7f0000000500)) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) setsockopt$rose(r1, 0x104, 0x7, &(0x7f0000000480)=0xb2a, 0x4) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:41 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800]}) 13:32:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00]}) 13:32:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x40ac1, 0x0) ioctl$IOC_PR_RESERVE(r3, 0x401070c9, &(0x7f00000000c0)={0x6, 0x81, 0x1}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 13:32:41 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00]}) 13:32:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400]}) 13:32:41 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:41 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$rds(r7, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:41 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') getsockopt$inet_udp_int(r0, 0x11, 0x65, &(0x7f0000000000), &(0x7f00000000c0)=0x1) sendfile(0xffffffffffffffff, r0, 0x0, 0x10000007ffffffc) 13:32:41 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00]}) 13:32:42 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = getuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@empty, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@dev}}, &(0x7f0000000240)=0xe8) mount$overlay(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='overlay\x00', 0x20, &(0x7f0000000500)={[{@workdir={'workdir', 0x3d, './file0/file0'}}, {@metacopy_on='metacopy=on'}, {@workdir={'workdir', 0x3d, './file0/file0'}}, {@default_permissions='default_permissions'}], [{@permit_directio='permit_directio'}, {@audit='audit'}, {@fowner_eq={'fowner', 0x3d, r0}}, {@fowner_lt={'fowner<', r1}}, {@dont_measure='dont_measure'}, {@context={'context', 0x3d, 'unconfined_u'}}, {@seclabel='seclabel'}, {@dont_hash='dont_hash'}]}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$rds(r7, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:42 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400]}) 13:32:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$UI_SET_FFBIT(r0, 0x4004556b, 0x5a) 13:32:42 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:32:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:42 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = shmget(0x2, 0x2000, 0x0, &(0x7f0000ffb000/0x2000)=nil) shmctl$SHM_STAT(r0, 0xd, &(0x7f0000000340)=""/157) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f00000001c0)={0x0, 0x0}) ioprio_get$pid(0x3, r1) 13:32:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$rds(r7, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:42 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00]}) 13:32:42 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:32:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:42 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100f9ff00000200000000000000000010000000000000002000ff0700000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f0000000040)="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") r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) ioctl$TIOCSCTTY(r1, 0x540e, 0x1000) 13:32:42 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$rds(r7, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) ioctl$KVM_RUN(r4, 0xae80, 0x0) 13:32:42 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000]}) 13:32:42 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:32:42 executing program 1: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x301141, 0x0) ioctl$SIOCRSSL2CALL(r0, 0x89e2, &(0x7f00000003c0)=@bcast) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) lstat(&(0x7f0000000200)='./file0\x00', &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0xfffffffffffffffd}, [{0x8, 0x0, r1}, {}]}, 0x34, 0x2) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x4000, 0x0) ioctl$KDSIGACCEPT(r2, 0x4b4e, 0x13) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:42 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = semget(0x1, 0x3, 0x2) semctl$GETVAL(r1, 0x5, 0xc, &(0x7f0000000040)=""/181) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x10000007ffffffc) 13:32:42 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) utimes(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={{0x0, 0x7530}, {0x77359400}}) r0 = syz_open_pts(0xffffffffffffff9c, 0x20000) r1 = syz_open_dev$usb(&(0x7f00000007c0)='/dev/bus/usb/00#/00#\x00', 0x8, 0x105800) ioctl$VIDIOC_QUERYSTD(r1, 0x8008563f, &(0x7f0000000800)) fcntl$setpipe(r0, 0x407, 0x7) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000240)='/dev/hwrng\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000840)=""/190, &(0x7f0000000900)=0xbe) write$FUSE_POLL(r2, &(0x7f0000000340)={0x18, 0x0, 0x1, {0x80000001}}, 0x18) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="300200000001000000000000000400000000000000100000000000000020000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000400)={0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000780)={0xd4, 0x0, &(0x7f0000000580)=[@enter_looper, @decrefs, @increfs={0x40046304, 0x4}, @decrefs={0x40046307, 0x4}, @transaction_sg={0x40486311, {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x10, &(0x7f0000000380)=[@fda={0x66646185, 0x1, 0x3, 0x40}, @fda={0x66646185, 0xa, 0x2, 0x3b}], &(0x7f00000003c0)=[0x0, 0x38]}, 0xffffffff00000000}}, @clear_death={0x400c630f, 0x3, 0x4}, @reply_sg={0x40486312, {{0x2, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, 0x60, 0x8, &(0x7f0000000500)=[@flat={0x73682a85, 0x10b, r3, 0x2}, @ptr={0x70742a85, 0x1, &(0x7f0000000440), 0x1, 0x4, 0x1e}, @fda={0x66646185, 0x8, 0x4, 0x19}], &(0x7f0000000480)=[0x78]}, 0x5}}, @request_death={0x400c630e, 0x3}], 0xdd, 0x0, &(0x7f0000000680)="8af72a4adc9569aedf010c3f898e271b8c7fdffb48fd257eff7c1f9f2ef2ab9b5118efdfcf82dc7406a736b2982fc709277edb914c4cbc87e0e63258ad53173383b48987cc98c0f6a80724032bf8d50e7a98ff7fa76dba60dc792e2df0174f7995aca2905b54432c8610911c513ad22a421ae60b6dada30971eccc5fcaa80a657e779a9c8d0fbaec0c65f3a699bbe44cd7c779a2e768f15549bdf0f90712b11209929acb6cf898ff819891bf7c2929c66a6fe7142d785dbf20f46e925bc3d5f2b3651d19431ad8a3c63f863c065b25cd68a1955c5ec9582e8003f5e3e2"}) 13:32:42 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:42 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}) 13:32:42 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) connect$rds(r7, &(0x7f0000000300)={0x2, 0x4e21, @local}, 0x10) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = syz_open_dev$sndpcmc(&(0x7f00000001c0)='/dev/snd/pcmC#D#c\x00', 0x8, 0x20040) ioctl$EVIOCGBITSW(r0, 0x80404525, &(0x7f0000000340)=""/155) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) signalfd(r0, &(0x7f0000000040)={0x80000001}, 0x8) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$midi(&(0x7f00000001c0)='/dev/midi#\x00', 0x0, 0x80040) r1 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000200)='/dev/btrfs-control\x00', 0x80181, 0x0) ioctl$VIDIOC_EXPBUF(r0, 0xc0405610, &(0x7f0000000240)={0x3, 0x6, 0x7, 0x80000, r1}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x3000000]}) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000280)='/dev/vbi#\x00', 0x1, 0x2) 13:32:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000]}) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) lstat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {0x4, 0x2}, [{}, {0x8, 0x4, r0}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000340)=ANY=[@ANYBLOB="020000000762a4339766a7a36ea813d97c4701000000000000000400000020000000100000712a5204a8405240cb620000000000661bafd2160f0ed4bb757f171ee64e3c20000000004000006514862bdf4593760934a3710a8425b5aa8c82ae8d80f9"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4000000]}) 13:32:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000]}) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffff9c, 0x84, 0x6, &(0x7f0000000340)={0x0, @in={{0x2, 0x4e23, @empty}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r0, 0x84, 0x19, &(0x7f0000000400)={r1, 0x3}, 0x8) pipe2(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) write$binfmt_elf64(r2, &(0x7f0000000500)={{0x7f, 0x45, 0x4c, 0x46, 0x101, 0x5, 0x5, 0x1, 0x100000000, 0x3, 0x3e, 0x7fffffff, 0xbd, 0x40, 0x12b, 0x8, 0xfffffffffffff800, 0x38, 0x2, 0x4, 0x9, 0x2}, [{0x0, 0xffffffffffff0000, 0x9fdd, 0x6, 0x3af47715, 0x543b, 0x32b0, 0x768}, {0x6474e551, 0xeb03, 0x100000000, 0xfffffffffffffffa, 0x17f, 0xe4d0, 0x8, 0x80}], "ec79ff1c727a79d2790078c2e0fb1c14f2ed170af34973a79593aa3a963ba43b21f7d30916aff21e185a20e1ba095435fbd49ee676814852283d600ea4b6125ec5ac36f9512b84c7e7f9e9b2beaf81b05f17ac28e5359c0316acb0a019962d42e353e0ab76b0254130234abc8348233b5157bbd5d238c3b593c58b53621b7eb03242386dead048bd5f85c3c084b0b6e50282f1d12b2c97e25824bbd3e905a1562c0490f32dc1085a1b5fdce2308b1f8f33ddaa60f3a26f831b5e8e26683880de184461dc719a99d97b819310c48755dbc6ee322bfc8289bca0327d13f1048eecf6b8393c", [[]]}, 0x294) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="05000000", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x5000000]}) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) r5 = getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000200)='fuse\x00', 0x800, &(0x7f0000000480)=ANY=[@ANYBLOB="6664ef028bd8561c6efd0695f70d817f625607dc5db81214bb18fb0659299a7d976273db18b4125b8a2035b2d9ac0ef8e10a25b775a45bbcdd4222776883b8f24467fb4ec457bd5118e0bfd50783c5789a481dcbac1ad195524995d1e888ae8dbfac650eb2df0c93126a5bf20733b8affd208147a89b70fb", @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC=r5, @ANYBLOB=',group_id=', @ANYRESDEC=r6, @ANYBLOB=',blksize=0x0000000000000200,mask=^MAY_WRITE,subj_type={trusted,hash,subj_type=/dev/kvm\x00,defcontext=sysadm_u,hash,fsmagic=0x0000000000000006,\x00']) 13:32:43 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000040)=0x0) r1 = syz_open_procfs(r0, &(0x7f0000000080)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) bind$bt_l2cap(r1, &(0x7f00000000c0)={0x1f, 0x5, {0x40, 0x9, 0x0, 0xfff, 0x9e, 0x9}, 0x9, 0x2e38088c}, 0xe) 13:32:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000]}) 13:32:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000580)='/dev/video35\x00', 0x2, 0x0) dup3(r0, r1, 0x80000) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r2 = geteuid() setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000480)={{}, {}, [{0x2, 0x6, r2}], {0x4, 0x2}, [], {0x10, 0x2000}}, 0xffffff2c, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r3 = socket$bt_cmtp(0x1f, 0x3, 0x5) accept4(r3, &(0x7f00000001c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, &(0x7f0000000240)=0x80, 0x80800) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000340)='/dev/rtc0\x00', 0x101000, 0x0) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(0xffffffffffffff9c, &(0x7f0000000400)={0x10, 0x30, 0xfa00, {&(0x7f00000003c0)={0xffffffffffffffff}, 0x0, {0xa, 0x4e24, 0x8, @loopback, 0x2}}}, 0x38) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r4, &(0x7f0000000440)={0x11, 0x10, 0xfa00, {&(0x7f0000000380), r5}}, 0x18) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) getuid() getgroups(0x6, &(0x7f0000000240)=[0xee00, 0xffffffffffffffff, 0xee01, 0xffffffffffffffff, 0xee00, 0xee01]) 13:32:43 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6000000]}) 13:32:43 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) setxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@random={'os2.', 'pagemap\x00'}, &(0x7f00000002c0)='vmnet1^\x00', 0x8, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in6, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@initdev}}, &(0x7f0000000180)=0xe8) connect$packet(r0, &(0x7f0000000200)={0x11, 0xf7, r1, 0x1, 0xec}, 0x14) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000300)='/proc/sys/net/ipv4/vs/backup_only\x00', 0x2, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000040), 0x1, 0x0) sendfile(r0, r0, 0x0, 0x8) 13:32:43 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0\x00', 0x0) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$kcm(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)="2553c6a42487ac60d3c79cf04344bf5aad71da63ce5f2ea73c7a161179c994368ee7c3e1cb38c1ac9256e7ca8ff2e2a19a3839dfe28ba3d102f6a21185c5f94f84cad420e3197244adf3ed20b5821d3b58b0a778cf954ec46b2450f8ffa6fef363b0592b2ded7eda12531a5f23c9f8e42c7aa0be5c925b0662bd43811f4ff03d98e16bf699812d89111be624cd59154e77d044941394a36668f633378aa81a731c0b00ec765e9c8c36fa83e2411011813c39fcdbe05587dadf2848a98f29c17b602f43d29d7196852c0d2dac15fc26b200538289", 0xd4}, {&(0x7f0000000500)="fde315f3065da85c6fd6527f4513dd8bad2e435071abd2dcff71668366a9d259c1708691ca21ff72caef81852e2cad108109b899e35e8d5d337557d1da96281599568c00d8435e50505be5b764cc508366a934d980fb0d43fd01f7ec0d629bc064c5e504", 0x64}], 0x2, &(0x7f0000000580)=[{0x90, 0x11d, 0x80000000, "63310c9f0758432dac3fee1dde6ec50504541896565ba52433cbef19977e179c4e7a4ba27889db04fd1770ccecdd00f2e4a4fdcada4949a9d8a957d08e009c5bba99f6e4894cc93b336026dd1ecf611d324ab6099e3f9cded0e356de2b4360f470ab667ee4161b751c08afa7cc91d3144ec1ebf1d92487f298e767f66c1505"}], 0x90}, 0x20000004) 13:32:43 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x48000000]}) 13:32:43 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) getuid() 13:32:43 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x80, 0x0}, 0x0) 13:32:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$video(&(0x7f00000001c0)='/dev/video#\x00', 0x7fff, 0x400) ioctl$VIDIOC_QUERYSTD(0xffffffffffffffff, 0x8008563f, &(0x7f0000000200)=0x0) ioctl$VIDIOC_S_STD(r0, 0x40085618, &(0x7f0000000240)=r1) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$KVM_HYPERV_EVENTFD(r0, 0x4018aebd, &(0x7f00000000c0)={0x0, r0, 0x1}) 13:32:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7000000]}) 13:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f2b69"]) 13:32:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x5}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = syz_open_dev$cec(&(0x7f00000003c0)='/dev/cec#\x00', 0x3, 0x2) ioctl$VT_ACTIVATE(r0, 0x5606, 0x3ff) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/capi/capi20ncci\x00', 0x2, 0x0) ioctl$TIOCSCTTY(r1, 0x540e, 0x20) mount(&(0x7f0000000200)=@md0='/dev/md0\x00', &(0x7f0000000240)='./file0/file0\x00', &(0x7f0000000340)='ufs\x00', 0x808800, &(0x7f0000000380)='/proc/capi/capi20ncci\x00') 13:32:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 13:32:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x2}, 0x80, 0x0}, 0x0) 13:32:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$PIO_SCRNMAP(r0, 0x4b41, &(0x7f0000000040)="dc7758f3f3fe80f6016394b29c9f770b8db47bc73ce92fdd02cfb7df4e66b58db8a8f4348ef6bc760be97ca7378b4677c3ae3cb1267a9b2d5bfae8e47962282579f6c0a0ff9c45275491506ca3cb504ad12875cd5c5b7218119f") getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000000c0)={0x0, 0xc5, "bd68f26af5d17e10cd950fc45aafc3b12b0d85911616969c0a4f04d9aced1f140d9aa96930faef24f89b344aa0a64ce045bd8f5ab8bf0177554b7efa764ceec2bafc6c1151d49ec33066c964dc88f5d23dd58fb849dfa7983465982e70d6e94d3bfc04810ec5708177f49670d6071bdc9f823c5ad6dd533712f7fca0989e19c7394a32b656aad4cc3d56613a734f9f723160f4112e2f94a322611d92730efb1c31b6ffebe8c9c1f023a3553b993b7a072e09c327bc661653ad2b31e45af5513f37d43505df"}, &(0x7f0000000200)=0xcd) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000240)={0x8, 0x101, 0x1, 0x0, 0xffffffff, 0xe1e, 0x9, 0x9, r2}, 0x20) 13:32:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x48000000]}) 13:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13:32:44 executing program 5: r0 = syz_open_dev$usb(&(0x7f0000000100)='/dev/bus/usb/00#/00#\x00', 0x2, 0x40000) r1 = openat$vfio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vfio/vfio\x00', 0x0, 0x0) connect$l2tp(r0, &(0x7f00000000c0)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @loopback}, 0x1, 0x0, 0x3, 0x2}}, 0x2e) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r3 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x10000007ffffffc) 13:32:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) lremovexattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)=@known='system.posix_acl_default\x00') r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20ncci\x00', 0x80042, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x2d, &(0x7f0000000340)={0xd78, {{0xa, 0x4e21, 0x7, @ipv4={[], [], @remote}, 0x20}}}, 0x88) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x68000000]}) 13:32:44 executing program 1: mkdir(&(0x7f0000000240)='./file0/file0\x00', 0x1) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$SG_GET_LOW_DMA(r0, 0x227a, &(0x7f0000000200)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="02000000010000000000000004000000002ed9338d000000100000000000000020000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 13:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) 13:32:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x300}, 0x80, 0x0}, 0x0) [ 2661.844575][ T9589] QAT: Invalid ioctl 13:32:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2661.893183][ T9589] QAT: Invalid ioctl 13:32:44 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000000c0)={r2, 0x8, 0x1, 0x2, 0x58d, 0x5}, &(0x7f0000000100)=0x14) 13:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) 13:32:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xffffffffffffff80, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:44 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x68000000]}) 13:32:44 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x74000000]}) 13:32:44 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x2}, 0x80, 0x0}, 0x0) 13:32:44 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000007ffffffc) 13:32:44 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_ENABLE_CAP(r2, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r2, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 13:32:44 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = dup(0xffffffffffffffff) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffff9c, 0x84, 0x1d, &(0x7f00000001c0)={0x3, [0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x10) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000240)={r1, 0x7fffffff}, &(0x7f0000000340)=0x8) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c000000]}) 13:32:45 executing program 1: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x81, 0x40000) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x50, r1, 0x704, 0x70bd2b, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x100000001}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_SERVICE={0x1c, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e20}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x6b}, @IPVS_SVC_ATTR_AF={0x8, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}]}, 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x74000000]}) 13:32:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) nanosleep(&(0x7f0000000180), &(0x7f0000000140)) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) mq_timedreceive(r0, &(0x7f0000000040)=""/28, 0x1c, 0x81, &(0x7f00000000c0)={r2, r3+10000000}) 13:32:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x4}, 0x80, 0x0}, 0x0) 13:32:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = open(&(0x7f00000001c0)='./file0/file0\x00', 0x200000, 0x1f6) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000240)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000200), 0x13f, 0x7}}, 0x20) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000340)={0x0, @in6={{0xa, 0x4e21, 0x0, @local, 0x8}}, 0x5, 0xa2, 0x80000001, 0x401, 0x5}, &(0x7f0000000400)=0x98) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000440)=@assoc_id=r1, 0x4) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) clock_gettime(0x0, &(0x7f0000000480)={0x0, 0x0}) setitimer(0x0, &(0x7f0000000500)={{r2, r3/1000+10000}, {0x0, 0x7530}}, &(0x7f0000000540)) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000005c0)='TIPC\x00') ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000740)=0x8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000680)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="7012e68db025012b8fdb9a8ee79d7a087a00c7ef1d69f87184cbcb9c644900000000"], 0x28}, 0x1, 0x0, 0x0, 0x8040}, 0x40) symlink(&(0x7f00000006c0)='./file0/file0\x00', &(0x7f0000000700)='./file0/file0\x00') fcntl$setlease(r0, 0x400, 0x2) 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:45 executing program 1: mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="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"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80, 0x0) ioctl$SCSI_IOCTL_PROBE_HOST(r0, 0x5385, &(0x7f0000000380)={0xe, ""/14}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000740)=ANY=[@ANYBLOB="02000100000000000000bd7f3b1cd243570b00001000000000670e0000002000000000006e342c7485a083b06293a0187979d3335788df005a1d15e71fbe184ed6fa3119eabdfc23699e76b10e00000000508e14f44fcc1586985a0273cf89c0ab45bef124000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000400)='/dev/vcs\x00', 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r1, 0x2286, &(0x7f0000000440)) r2 = syz_open_dev$vcsn(&(0x7f00000003c0)='/dev/vcs#\x00', 0x7, 0x400000) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f00000007c0)=@req={0xec0a, 0x5, 0x1eb5, 0x9}, 0x10) r3 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000240)={0x28, 0x0, 0x2711, @host}, 0x10, 0x80800) syz_open_dev$sndpcmc(&(0x7f0000000840)='/dev/snd/pcmC#D#c\x00', 0x6, 0x10000) ioctl$sock_inet_SIOCGIFPFLAGS(r3, 0x8935, &(0x7f0000000340)={'veth1_to_team\x00', 0xfffffffffffffffc}) fcntl$F_SET_FILE_RW_HINT(r2, 0x40e, &(0x7f0000000140)=0x7) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000800)='/dev/full\x00', 0x181004, 0x0) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000200)='system.posix_acl_access\x00', 0x18) setsockopt$inet6_udp_encap(r4, 0x11, 0x64, &(0x7f00000005c0)=0x85, 0x551) 13:32:45 executing program 5: r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/userio\x00', 0x40, 0x0) r1 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={0x7fffffff}, 0x8, 0x80000) sendfile(r0, r1, &(0x7f00000000c0), 0x400) r2 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$TIOCNXCL(r2, 0x540d) openat$md(0xffffffffffffff9c, &(0x7f0000000100)='/dev/md0\x00', 0x400, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x627bcdfc, 0x7, 0x4, 0x4, 0x1}, &(0x7f0000000180)=0x14) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000200)={r3, 0x100000000}, &(0x7f0000000240)=0x8) r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r4, r2, 0x0, 0x10000007ffffffc) 13:32:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 13:32:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 13:32:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) sendmmsg(r0, &(0x7f0000006000)=[{{&(0x7f00000003c0)=@pppoe={0x18, 0x0, {0x2, @remote, 'veth0_to_bond\x00'}}, 0x80, &(0x7f0000000440), 0x0, &(0x7f0000000500)=[{0xc8, 0x1, 0x2b, "d6fb476b06532aefdc0f9e6d8c092c58b5b8899e25596be7046abd7e37d9e93a1eb63caf5a2e966631e89bf7b874db23a1e7ec72b9ae8bf0512dadcf611b3c5d63a8c11544a06da7880c60fb6d43393f4a17e890aa933441db1b69163b51c7f4a7e188f0ae49dd1b9115ca2be670abc5f17daef2ce6c145ab9d3cd14d03d5e9c2b50aed1bc7fa9899db066f384f9c2e23539fb500517249e54b37ca12a90fe43dd00d4ef6f6426ded5a62b9aceb22ce111ec4d70eaeba6"}, {0xc8, 0x101, 0x10000, "1d274ad73e1d12bd1066c29514ac4663e8c607c2481d22bab4321b3d118d55a69e45e9bb1701dc75a7fde6b08b16d0bfe32da943f48e72955d7219a3c498afd7c3617e8908c795a026c3ab5af923ec0e0da5c8ff51b3aa193d66d4ef83ca33b209707b2e5a7324f7c51450b928aca10ff12ca1a21fbda22a4bfec78f1c0c7dea5473086cc723d346b63012b8b6998c72c6d7fc635f86f65e069214580036635ca1e424c71ebcbd9e6edb41852d14208ea96badbcfb"}, {0x1010, 0x10d, 0x5, "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"}, {0xc8, 0x10e, 0x80000000, "9e7e75991784f5759c899cc4097f02770252bafd04e7652ec62c47aa517988bfaae85a9a490dac460bbe8bce35476949b1e599762c105e477a21fac24794f678f26f525cc18b17b438b69f7989c762474ea11c9416d3a5b7c3dedebbc21020d63b23c4732e82c375f0c2b94a0956ad4789f1775364e1c3d30f8e636160d73566fa20b43172fd2eff5906a2a1315345d758b81415770ebfde8cdac7d85947cf82001adda06f7c5b5d9bd08dec7cd74ae47ce642"}, {0x110, 0x112, 0x3, "62044d32c70a94c5075716da0e090f2d0eae112302409bba30bbe070e51e8f756288f290fa10b457d0c25711530a47ea41e85795ff5b626ca156f7f34cc0ca0241d880a99ba7da3628936461cbf14387cfef01dd4ec07d61cfe998b82bf69e2be548ded8431498a1a3f5ff8efba0bc85a6a7e9fa633193bbaaf70c16d18ab88b93378994c5c575db3255c9f73892c8b73d9a9494d030345da54fc11d3ad3cb13a2a0b2e3f36d1ac74922c2cc7a56dd070770a4fff8b7e1a346107bc071a27122a64c7def49eda9ef1f6c95fc5f1d6c87b534967dacaa931334ec5a5cac92d5e3cc480e7ef399ecdb2d6c7d05d02e5b2fd4c84a8728a1ea489706"}, {0x80, 0x10f, 0xa6, "4d7282eae0dea81aeb24aca3a60055a43201dc82ee0d578dfaffbc56596e573ef6fd1831caaa0bb6e174849dd9e7e4d8bbb7d8bba93107e3064b5308138735a922db0d0f7225b012e54ee83ced389440ed4f73658312950cf876d0895aa4705aeebda93fe64c3d31c4126ff2d4b707"}, {0xe0, 0x10d, 0x29d, "be34c6bd28c2c17abfe4f342bccbcac46fe2b8b0cd733554971092202fb84e321246ca4ce29bc55da6d697d592a418b436ad6a1faeae5089f9c2002f818f304ee753522ab1f257867ffc71a76a0f952fd5e364d6ff7db3101d5ae0b41babad88edff07549e4ba193124c0c5fab2e8f5d20102e02afd22440e3aee91e3ff49f86aaed1518ca5a7cb3ffa3eecfd280fbc6dc12dd9b40332082114d413e8050521fcd58d77253d2325ae2248f3faad3d157756b6ee666fdd489f3f8a303528664749e7a795660331852a848"}, {0xc0, 0x11b, 0x9, "98089776256c87b5601815f3d0b33fec56c75d7d74b120431e1c79102515d52b3b5ea2c8cf5caec524550d80a62b87c9cd2378d965b92582b109b32621a0671420b60e3b89e6341b3d75656c4a18e04431d50146db97610f31959cf38fa899357b53f05444027c1e707c5cc8cf4f0e14ae3d4b29b547a7d66a8a93807b0efc22be092910388804dff3a45bf44bbe962cc974eba2e6111d4faf3f7eb9225cada46068db66de5fae005d1282ca3a"}, {0xc8, 0x11, 0x6, "f18ee3f4983d8b915b29461bed5671c6941c507045b48601fd07d52f809f7ed4f77316cdfec9616b0c5fae2edfedb7085b87b851c5f161479c53e303a4b84f2877cc9c0d8d1689c3115d247002f66ec569621c18865271a921dd1f1bf27854ce8673d90dbbbcf3265772ed324a4b8acc3e1a42db73d27e7d53cb2954906d72da12903aa9f2e6678a044281a5de210b6c9c2bce0511c7ad564a8af02dc580603af91a6926b153a5df58cd94a43a855871a45a86011ff7"}, {0x58, 0x103, 0x4ff, "30e06f3080d6c420387d5b1a0d50a21b8a3549c7463937bfe439c80d047a45d0a9b8133dadfc8b0a611d0cfb340640d59de252c5836e3f4869be0eb2fdb4f25218"}], 0x16b8}, 0x8}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001bc0)="6197f03781be31dceb8fb6434e80cc9aeac71830a4b2804528195d017abbe54dda7f32f0a3209fbbfed0b60a570041412cf917b38a171671d62064f66e7724e653a26d676c6c23b77b2ba18e6cd9d770a6e43d98ea5ee3f599300de954fea22d40b9934ed7c5f9da1493667929a548156fdbca7612eb9a51de4165e3519fb3478910762c99f5ae476d60beeb375bd34d26b8b94cca1696", 0x97}], 0x1, &(0x7f0000001c80)=[{0x90, 0x103, 0xe358, "198206e5cbaf95f121af3678b4c2770011450c6d2b3ee695ed62334f4858973d60155c07a09244b056c0d332d253243e5b6a68ae4d5776f37452f4389582450e255d568d41bde06364e8929616716b39d5e26d1ca4ba9c5a1253b47ad262cf75db1880436d3563c1244da93ec7a10b52b257fa8cd90158a9ddd273ccf72348"}, {0xb0, 0x10e, 0xc0fb, "829fe39f58dd5b7d5a6ac0dba8208ca717109d9ae0acae9788680d17bba80994fb4a600460430c86cad487c62ee16c795ae95aa3987c9a2d15be837f41ab14b00765a5c3c23b7f9fc528588535cd7737512f63b18bb226ddb8c754446b96b18843c9a682c5d031711b0fa85ecabbec221b68e39ce8b0049a1b23fe85fff8ba745bca67ee3b0da85e57b9e2df3dac7b7592f79eead290c26039559277"}, {0x38, 0x10b, 0x8, "c8a0604a213722d2622d705ea159360609c0b2383d853c74d58ded53ffa9f662ca3caf5a"}, {0x48, 0x111, 0x79c, "6de270a497df2f31b2d6e9bc03433ea55bee4564a6b3bedb319d4b5a51d6541af890314cbe3b21b7e14db89ca0dc5c4a21"}, {0x1010, 0x119, 0xd5d5, "3564db4c9ac6c428cf8da6d47ef93023e6cb150535befe64a57853994115ba7c3ceff0f94fd54ba022b1f6fa9c1d0c699fccb1d99ca7d0a3d05ac1de0553280460c193f189f7c56999b12ee42ac16945d587ab161c4c30eb3b970d0319f4afec5dfdf072bfddf4e71905aff9840c7a4cd83518beeeef19c52bc6b98c094b20c34102cf732288fd01f74e1876f2877e92efc914f5a6b2d808da0014d769dfd53149f784878b98a6f485498b1b793a743798917f47c496cbc5292861be7d47857ec37969af085ef0c683ca1f350efa689d84d03edb0daf8b2ccd9165021e415341a35401638ed7a8570a7faf64709f7e9032bf82a6de89c3b1b073ab1ae33be2af01baa0afce309b4e4ce43552519edd595717d1f8f054621e3a234220a7e1c9a5fefe4b59736b21bf88f2229160e3210c2e94e97dd3512df57ef524c2f1c06519de30b462636697762b04465d60a536c75c3e1d114cf4b8a111ba3dd5fb3b5e04268136439f855947a7e3a1a1ff6454b34da00a773d9365bb15fb7128546e661de554d045d3ac739807d7da6a946ef0e4857c826e394ae08237c4c54fc821eb2f1da2eff2ae6d071d7470b29c1b338558f61a28f5a39b4004bf4135ad37e21d112049961a62e89451c521e2d51947ae74bad121c707c140cf03304694c80598527015929e14634102302eceabe2a043dd656cf462adb00fcb2a6cad1fc211f8b4963c8035df1b0fff258500996de2e4d812ccf74f0aa392b637083d6c44ee11688ac5fa429d8734914fedf92bddaa24074a5aed90be191fe09bba906eecb2ba762627241bc9918d4eac5f43dc5f929cc263ffbd271c4e4e9319e73e72d080276c2b388ab7d7101d872fb88ebccf2b5e45cf3c876b019de9fec0fa7ce2b7bae091a33d9a5a4c8834886c0bf50e4660d706ea972e6ceda34f44f2c8b6dfbebc7251a6196e0b66feb47a3466a8f0113267c1b7c9b90c3edf5942b48174cc90ca1fe355e68ce7d3988359096e3abab9b12ff6473907840a7caec0177eaeeb213a0af0768944445005c3381e1ca7391b4697881b840b3951ed6b1b034406388bb7d18dd5e9f480fa54a49414b588265937499146168445cbabe1382786437ee0f360a8527b7cffaefa6a1681563e4b66ac8b9638c9a007f128b40123b5f0186d30ebc85b4cbe7c6766712a5f4a1e010e6b42ed35a9ce02a58c423dc2577a261741429d7c04af8c58b89d9b774e3a9011aed97e84fd317b0b392e58ab71d8369d98d15d431a95fad7235d72f1e38cddc6d8c70f258dba6dac7a7eb27e91cee6ceac79b5369ef991d3841a7a4938261785f483cf8fc32aba001ea0c635723ca42c70368e42ed0d59919826002655237430e57e6c83605dca7b385398547b978e2820cf144b187fdb307d14b698f2e8425a121f906df8f87e8f3187fbfce46b705b0776b52b0b76b9a6580adf8cb6e0216b1110c7a8fddf971c3b5864d54a63bf09774969dadd30e62d60fca65a095c5dc68f671a79734383c1efc96d47c8ea0651fffffcabcb68b46b332be530f260d2b8b10d513450af6b2c76319b970c69e1120620d929b5dfad1eb48c68c3c3f0e708fc1a546a7354b92feb6ed4a4b5ba7e7e221764447e40ce0340cb7e45a59db5e0c1a01bb831aa5314f703f82c8251788f804fee364aa984fe39c92a12c16d2d796a6eddb5f4c616e02218336287abf797ac61af081a7a01ca1da6cf7ec42e0bd08bb505caca590ef77b97e6faa338db2e107621aa1ebaaa53afc1c0a44a89ddef0026b9ab7a856d7e80c2077e4ed2a6ffcd63c5a9db045e7d44abbc61a5d47da2c2c82e7ee417b498009bbe61018271eb8bf465ae35e5b22f9f9462d210051c70386e91a3e2623b63dc21142508f57e98d180dda4beb893898527e889ee01064de9871b80b604b9a1d64f2e29362aec8a893fe33b29d0a9bfd10a46511f33c3195c9866f0adfaab5900ecb3ee0741d1da69a46ccfe67202b39902f02be201212b0ab8502de48632f7b842ef3335bd0be6cc89fc6876ad12ba852163424b835fe3d26d8497044d4e1141768c828ce7856ebb08eae264801fce7ebd90829c18bca5702be5ac3996863af875524057facba4a1e8f92060c4313254ed88c98780feb4f6209cae648b6625d1623f517330578969b55d58a50b59f199fb0b40a565579b829cf289d396047c1d0be02e9d4a01edd8510b1b8c3da84dbf00c2148575b25669f778c60cff61eb8338e9dd6a9f2e3d404dbaa922bd93b97892ba060e4b4f90b761edd69c3c47c4108024ccf55e5c0ec39eb227f66fab12acb6dbe40a5795fe9a51e7e01ac0ece41835e090b4df3d3b63c573442194280b55a647bd4b64076142841ee0126a34f27d0749b816e852202b06641b9599f165229d72e1930875bcf41dbe4d17e2da88ec20b870ab2d956603ab963a77b26c039da9394f7374f0828810725d361eb00b3d5361463d1a96dfbcd56f64ed0899c70676bbf7de0ddb8c45bca12acab4d928364c1a0a1bff107e03e457e757e88a9feefb7400bfa0aac2f8466a511fbbec7b0acc5d93eb9cfc03fd31a50c04d5602123ec89a55ca91a8ca3de1bd5759b3524e4a6fb654d60a4c3cd8aa29680b65210ac44dc3366488e2e63f9f9342f8f3c137b7f1008d9b44a1cf37c0bc9dafab98c70cde1caa173001fd6f21d973eab08abad6a17dd667b4321f200ff1cc6cdf08c797b08f196d14f75a9f46855a65cf7042d6acb4fb3c9fdd8e11f28dc98a5f3b919659137b91d353ca847871a1f4f3ac8b550c7a90c8092fffbd759e71dc0a2ab933271d8a36f47f1fe6a9b4435220b6cf051984191454f5926f5df59d039d1490d2d7e44475e46a1980c0253eb1f005109f5a9f1b4e9f3a715422517d8dc6f5e4a998f658d7be2e2ec887c5c34a6facc167b7e01e7450f65cae228cfd23f8a6a399a4ef9aba8426d2fe3dedfa28a105997752de19f274ebb749cfe7c9aa6cd89116c7082e64b149ae36a390722e7dc2373ec965064bed2f7e4c0529e408881d50e86bfb66e3050cdb9e506df5fdf77d79751fb7f14a261d970e20da9d5e7f9c7ac6f7f9d5218d2ad196bc60c1b28b974c463587390c40e8fc3639e8b1339156f96e771da9b025ab43acff5c419e06a04393e328696162bf9db5b6e7e8acb61e67e9035d101a27e2d51e3b873a80aa5bbe174c325b7e1aaaab771aebcd85d2e6112370ee4a698a691dd45d5f2c3042b4f5156e6942c9a7f71a7fc2898ecdc8522ef7bd63df92aa6e7c5d48f3cfab2655b7f030a3b9323e1e68d82c2f30ea0a9977650caf176d7c798763d405fed834ac7bd9ae08c144287ff429e47cbe83c5116d0526c0bef7ab4937816c7c93074ce03d62c778b82f7ca177f3a5190f0ad86cb1fe8ec56f00f80ca3e4e12715a2c038ba26b1aab536b344efe5ff20ab4c0009bc321f657282e2e04b78cb882440a0bdd6da8d5ccfdf7dc9f38bb0247c26d3966b9a197bfbb1ff27189bc98cd1a4f4c90efa7f04a8fe51f4d304698d0bfd36cdad11b08d4fa963501ebf8f3ac2992760e51966e9c4d45c3712e51ff7f4198961f36e96559f70756549f20c75419d0625bcbde87c1ada37188b105226d98b7be45b5e28ea0b162d628b92f1648e727a53a73b625e3be8c29a1bf1ebbadfd9c5df98ef0dbaeaada15e05029c6f8151a0c99e80e915b37c631ee8d55961099bfcc57f53bdf28ea5ae3200c45f232eae88d5b0b794321f4e222cad59d2e9fa59fd2199d6592050665d9b6a0fb968636ea799d469dead49b00754bac671ee5b0e4973d26f165c55396d86331dd3e9594c5199710f002957f76eaa3a1b608522912931d4ade2bbc171192bf0971c2242e9f91ac524ff1fc7e8d17d632dc5bd8569c255b17af5e5e7adfb2d9333626f8af36aa032bcc9b1c765b70a5e4f9a2c893235a237ed133c0b41ff2dcdcf55d1ba7fb0d5b828e5cf61d05971ab83eabda8e2e40f8433cb922c40857ac58a7ca3b4d02bbf883e86924b6dc5cb18327ada113490e24caa98726853cb97b85779263b7a2583e6e5116938f5485cd51ffe69f56447b1fd0f7f237f4de570e3362485a15c50e1eaddbd00bc26acc8b1d34dedf0f6f0b7dd6e2b73c4b9bcae79e64da28510bfb511ca7a02528e84b673963eea526e081efed108f60ac6298eb88edc70b68fbab55d8077d7908db951b0178a826d1e6dbe9ea7dfcf110340a62b9687f39c7f8166a49c169adb3e22911fa5b02b2d1b56ab0943fa5e20bff585625444eb5055a27c7c7325ab1caaf2db1392540dbb8b0d16e242224c34ba55f28319c7ce7d29f00c8cb539d31b890bf2a97df3c2088e061c6fc194e1816107621d6500cc62adbbf2fa033874808e45588f3f177890eb9dd8c138bbc63baecde48aa76d4d7348a5760bb3845d46b48ade8cc84f6d4fc4ec28e28d3aa0d9ae6a824ed1854ff6fb8a047fe58b9a0da6666091455d0e011d40ac4003b7c826e999286ba337cc606b4a97e33fcc575c9753c8a065911d7c5af058942f7564bff3ec89c90005b03bf33796afe7e6cc726dd5026401ffd60ca3452a191b72f68d4ebfba161f4ab930e5f41e7632d9ff1d432fee000e80725d89911b4cfdbc770128c98c90c91e1399c4b52b04e7f1441e2804a05be4329fe999d974eb82df7ad47a3125f8f77bbd5a0d248e25e27b8a43a354800de3aefa5fa66bc4aa6f610b5434b50c89c5a046abf1a8db415ed15cda52ee7a8fd312962624f36d6defe920127bbbe88bf19e927c0b9bd0959aea832be2b91c2424d3f68fa8eadd631eff9faf35e248add299f9dcf09a9441d84cac8123200606399f2e22eafb1e384b77a7da83213bfb0df901ee3cccc8dac695f335fcb4a16ae67d58f0f15d97428ba224bb283f0c20198bdc97a1dee73da588ae59f840b199c779fb1473b534a61f0b661a57eec848989791326d953007c61c3f2d2a17619d540d3ba031adc18c91b6aeb8c9f1a9c44da115930d3eb2d5c7000f0585ef3d22cfa3608191e3a3fc1dedfc0a37b6bd3f2854f91fa44f26f5536a70089dcbe14d7389e8cbc7bbb325f5b19c8d8459802685d73b69e10d0060c10a4c3976c5c4a249f0cd62029cb22f3bbcf21ccfd840ded4be62fbc8a16fe0839b05cb0556df7ae00f4a2d79127e12b7e72f3d81e53c35fbe341207fa57792acf20b28bb288bc6a1949287e31cfa55e6b9de1d98953d7b16f601dbdeddf52170c008262feba06b028689fd8c059e01968cd1a1f3d13f58d823e091a677594ad6d8f8e93606bbd46f76cb9183cac1647856625cb48a9f932f0770e6ae88352a31a9191c70c8701d95a698ae7309e533cf9e3318b6528314d5206d96fad990f148f913360c92920f656b1d709365d2d25b2bb002e20fb84d288fef63b938838be2ea5069ef4a2acf2efe61ac64ce58326859e7ceb857e200883cbadecfe621f60ff4ceefad62598eb70824c50afc4a0e1d380b750303669db05d8a92172da19a108fcb1a116024250164a80cc53d8cf2b00e6f7ffc3b5fc6f69d6957420738608e322ad28201e31fd4e642f78c445fe703a8463fddb7b25166e8408430ce6e5937438420fc0325009dad1c36cf4c3bd50a90d283e21867a209a4f295995c9b28fc19b8b46b1005542cceb3998c73da783a76783ecb8eb48e6e6953cc3c280c99b114e7957cba90c9325d3a5be1ccb080a1d983ac3dacb37e16a784c56b3be4bbd9b2c42fdd67bd69922e216ef4822c1ca37da43b6518b2bb9b4202cf4f7a93786b0975b853a3a97fc713a"}, {0x40, 0x139, 0x2, "356c030cf4194c62e5e977711d629e5460db3ecfc7c9162c3acaead98d14736973fccab3203bdc2011e2c3"}], 0x1210}, 0xd7}, {{&(0x7f0000002ec0)=@isdn={0x22, 0x401, 0x1472, 0x5, 0x88}, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f40)="0df692103053d3e121abfaf2c123878e7104023f49cb520e14fe1cd05a269fc42344a4320e2ed9a06295054094cd1f9bf00a8e4d", 0x34}], 0x1}, 0x3}, {{&(0x7f0000002fc0)=@un=@abs={0x1, 0x0, 0x4e22}, 0x80, &(0x7f0000003200)=[{&(0x7f0000003040)="745f1477def334ef416776a35af235757555622f0f146d9268df3538f22702aaa35a7cf44290929d6ee3140aa0fb387ee17b604a0a500db093d8b48ab64b8011cb0858d82bfc7e65ddd02e59c66ea4210ed223266e3868a10ef0bdedd562a42f336c887380a42eb5e28104bb0656570c8d52859ef6ea3d926c885cc91b03d64594eba667b5ae7c60d92bbcccfe4ba2b7356ac025d3d3e97d69", 0x99}, {&(0x7f0000003100)="e3f2f910c9d5eb620849864f9570ca9d886795cfb8dde4aeba6e90aa43e9b4a44eecf552dfe01000bae390734fb3d32e10a6d017590ef811bd54b204e9ac268fcb4e4c07c302a59dcc65160d27d0e19d13361c43d71e36e570d6e226531ecdddf8068233a7889d50a9b1472e0780d953afde95c8ca72ad79a657b779eeb1a2fb0758ceb19a8cc3e63852205377fb546e7b01e835fbac354eb7ae85565bbf8d2232de1cbff80116af7363e6d66323995016fcfd81670ed54411c3c3bb0c607896dcb227906af5b8b86231fbe96a", 0xcd}], 0x2, &(0x7f0000003240)=[{0x28, 0x84, 0x8, "3fc1fabded9f9df5ca3122446ebcfeeb4d9efbde2a24880c"}, {0xb8, 0x117, 0x5, "639710b49d2ee3ee1ee051c8cb92b5efb26a28682c34a8c54626a93ad96439bee459e80df20efbee49e8bbae88dd0d28d32c166c4e93a63fbc4ecf82aca7a08a7dbd079ebb4481cd0bc2c4dd908f25fb8fea68e1934f6a2714b28f93c2c8a91f51aa3e414306389fbedf2a3596a55559f1ce4ecdc45ac0db9694e3bae19a02e9a2844da29fb85059e4b27be6a082ccfdc6a017d8b2f5515faf088b6a604e2d185de973bb"}, {0x38, 0x3b, 0x3, "52c093e1b08935f3731652d72ee45dcc94254fc4c09672e07b86b33745b305238304d2"}, {0xf8, 0x19f, 0x9, "f43369d8d1a8b8bbd4ecaadc30ddd2f73f982e49139ea4b8c64ff8fd32d392b4dbd48d29a55a75053984fc0ad46f50fd2906b4d6ac0006148c19b969d98272dd88cdcd9860a13038c7cad7efbbe63e79ebb03f198060818d40d3f841f5666af2ee2fecb2e37f4da772fd4ce286d35d567c08aa55f0ae42f2df96ad5af991f8c873dc62f25c2456891dfc16e3573874bdd911d410fce31d4e794ebae0d98f09fe3fba4320a33ad0dc5077742e314ed517b22b1ebaf9c7486aa1072deb8a2ff28c92ef64df76f7f6fc7b6ea278881f0fb671208ffe6dd48b7c0c16bf2b8496f030b999"}], 0x210}, 0xd039}, {{&(0x7f0000003480)=@nfc_llcp={0x27, 0x1, 0x2, 0x0, 0x400, 0x1000, "243b5f1c0d5df61b9ed37ede067282720138f06af42a1db4ed4114b4542c2a36cf61556de2cad8d10e90b32fb917fc48b81635e7e6dadc2e4440a1b9be76bd", 0x23}, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003500)="8c50078cd2ada885db6fb5e2625eef1c7f788d71f41f1f8af2fe07093ece108cd52517f4eb032a37f46630a5d839decc2243a7", 0x33}, {&(0x7f0000003540)="e94362f1dc09979a216b7c3357d57b", 0xf}, {&(0x7f0000003580)="cea5e604e20bea2d050a28d698ed02633614ac09d7c7e3f71fabd2241b", 0x1d}, {&(0x7f00000035c0)="931f50e6623bc6d30b2e7f97bc1085bfddf57382b34a9d0ca98c0e306a21a770baf5b26495370d936aa641ac6480de87be7e865ebda30c5426a67ae6ba5fd4802a3576cc11d9b9c9417013ab728b9e7d6695e4dd4c1522d8b23ec87b3c5153bc0680198cd1f36a1a1de377b4ea248ab0fed5daa7eae1b52a072b5a0e939bf57abca68a6e43ef0c39e3f15cb04ddb9939ba70ed04ca2a0cc6818b4781786b736578b1ad8ecdc38ce20779fbe4bdaf7fa0c5739dfef50003a8e3cf708ba3c8b1d466c78b31ae984315c5592121", 0xcc}], 0x4, &(0x7f0000003700)=[{0xd8, 0x117, 0xb0f6, "cc2fbe746938cb5a33470a4690615a8f087ee50085428c776dd8026accfe57f45165015fec56148b691cf7b5aaef2c13489bcaa6d7107db8b2a1dbda904e084d33ba5866ded8a02729a5a2f287a396654accc9c36079545b0db8612186f48adcc779c1a602f874e8a49d1aa9170835ec32555330c6d922246b489efe35a27e2b0f55fac354440c1f5320e040035b610a2e260f18f9a57fe62634a2a2398014ba699739bed8a87278eb0b4ab7fa7140dd4eeaff14ce287d0066eee01c5104a11745e5c7b1c6f3"}], 0xd8}}, {{&(0x7f0000003800)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x3, 0x2, 0x3, 0x2, {0xa, 0x4e21, 0xff, @initdev={0xfe, 0x88, [], 0x0, 0x0}, 0x80000000}}}, 0x80, &(0x7f0000005cc0)=[{&(0x7f0000003880)="d948906b58ab3ad4ddf439e735ffbe61475f745f0cf0fb4af789eb894af3596f3f2dfde2e9b08010e2b9d4", 0x2b}, {&(0x7f00000038c0)="7941a2dfb6dda0fc59021bea79926b3e0fc3ef0000441d5a807b1e0e9cc0640a31d1abce4ba75965358ff90f8857c0f17482986de5ef939477c13678d4d4c80b823cb66c8dac2d52eadf5b0fba625c2183d7ae0df250b6ab62504a62abcc1cffe18aa54f0739ea8d68e107231808d338f0f6f762e5fc981f65f2", 0x7a}, {&(0x7f0000003940)="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", 0x1000}, {&(0x7f0000004940)="a3e3e26a03481f03ad6fecbe026ee15834fceeeda8d75a720eef97f6c9fb55ceda491b0a8d49b9d50191a02613b1e377d4d975aa41aae07a84746f3730e0a49ed33dd616c6f7587cc9e849939c097958a0c49666e25a20b4cbac2b625f8560fc00fbb52b44bfbbb36682a5882906dce50fd7ad140691de0ff6d5b0b0871cfa972b5962f323adcedd4414c1374ae81984b36cf26b3d132b28ac7b9619ca7cabd2bb3d4c668f10e3b58f0a4ad7046bd8a073ea9de7757c186a7bfd", 0xba}, {&(0x7f0000004a00)="c5c52914a8c20e27a7990146237ad237ab9cbbbaf2662715be5f7154b0fe48bd5993cc0aef57774e387f7d888dd4c942abf2731e1dcafe92a230c2125e3c18a420e5ab24b31150590dde1838591bcac2e49e6291d29ff230ddf7b0faa182858352aa29484b35364714176f767d680b2782493de54466", 0x76}, {&(0x7f0000004a80)="b6d6a2c129e08171d8507234f22cffa465942a027a7830464298c3690b1040181ab0ef6c2179db07ca795ff4fb900dbaa501541dbb9097badc475a95eefad2a439dee4bf31aad27937b36a7ca4bcd05acaaa3cc0844f5fedbb1ed15e3dee8c1b6ef86e8bfaab94c357d717b42272e07b5e626ed3db3457eac22ff1743db91af6e02ee02ad5f94ca9267be206b07f0a68204cb976914167d848363194bad8388755a5f2743af88f287651486ca51aa74834f1fc575cb9fd5953de75db4d8d4ecf681d66a0816fdaae45fc0ee56a6df8b96b9b6f5bc06aa173baca678f9b729d87ef18713683e84a58cc8c5e92fc7d1bc9ab766970c26c383cf643b2a677dbcba68ee9a368ab6504d2c049424fd8ee2f7dd0419777db1af558eece0c43ceb19286ee90f48fc5e9cd4301e57ba5d30e595f1bc720db2a24e7bc5fff764ee2a468682cb3f0ec14848bed88b79175a07c438c7a3a7085e5445cb6f10c8de026e666b0d44f1fabf7b42f038b8e5ca87404e5e59838e0b71e96b40e1bf89bae1a05cd012f290f99353bbab7e6c22ba7a08178d5aa47b186b2ffff298f36538f1bb711e87817216926185d6270748f9488de8607649ab9b4ac85e0a8ac29be3ad7e22ed271e06c93712636a82c0f1cc242dc9e3285f727b07786dab24eb9e6accddfea1123e698d5e0372f669dcf73299ec3193688353bec09bb94e714877ec4ba113b7b3bff2667b880c6cb0801320a1ec5134a2417767832ee10f646df660d4e6a915f3fe2a0d3907f3bdb0412821e9428be719f26e90f5a87ce6ba592b81b9803ec50101669a260ae7692e6a84aac8429b87fd7a33158f73b07d52a6dfbf870ae87f9631cfc996566b6340664407f0c258bcc45ff519a2428fb729c4ef867b8b51c009687a40231fa9d7f887aec963e28bf73028447cb2accf596ff40581aa17226b2b48f06e330857937ddfab2f74ceb11db93b4d8a6b88606198041d2cd8215f9f5ffd325b45f4148387fc4dde1acb85e8c35dfb348c7c910f8d81d83597b5cd37f606622fdaac430002d30bf962cd7480b5ddd5d2a164810789cce632d02d64a6fdb7baa76e498e30a395cf423df625a6f6c37568221b6da1aa97edd7f976c957c678ab7f8e70c9c56f254c4d17a4723fcfaaf3e613d31f3f5a66ba11e9031afad89105d6cf8a5e09bf70424b498b3cd97c779862c0f98ea6dd5994ec18850cf47697b0cdcbefc0dc81f6cbdd3e7a02b573bfa94d8b45bbfa40313a80f309fac795c3a8e1684f16bfd5718f3cb76111438c8b662cf2718b7fd7effc9cf3aa690eb26f3705b50b6b97e4d91b6f896e5ffa0ed2414ec288c3b6b436adbd9deb39ce52ab260cf5be88a91a8dde947d168fa912de08b444a135064301b72f8e67ab98db64578e9838280f7bb03c524dbf4327ec612ecd4fdaaeec03780c0da4d3dbfc0227f46844374aa81ec2c63ec0b89ddaf0a952f57fbc5419033f796cb060d34cb4fd9cbc8a8575e0629c541205c369f1b748f3b2f7ec1beeb0fd90191b0645847e393841e996d9790c519953fe1aa6838e3c5fd67288c8cf52275c8dfc6d32e0897ede03fadd564f36f07a36c879c9af35edff33ecbcef253a786790b3d78006a3adbce2458ef37c3b785313c37ef104ca0464ae89e525d108f0f338ccf6362244e3159c37e9daa9da5c8ac4df8f326688f574c6897578be4ec488927a61edf62bde9be7953dec142cf84e9e8ff697fe2e57c4d85f8575a26e0a045a1fcee689019d2e2bc3ee892d9df1db2b120a5edbc11fd11a3b579188037131e679602a6e60dcdf51d5976e1cbbae9780dc65f195375fb26ff0a498d2bc2bffae501047edd822f4a8f9844fdc05511d84384649a6aaa03229391b94f3724ad1fbc7d30b5ff81968de5f3afc2ec1cce702d69f970b62440bd9b67aae6345f284698162c1944b38e3ce1ff0c96c5511699a84120439b40ee6f02f587f00d714c873bd91c18027d15d7da4a6825e5a86c57f4536074fb1a783d0c554ce5dd2f59a3c16ee79d9a5dfeb3428d7fed5414b4c4cc3f9cfb299dd45e685c680b7f36f48a349ec83a8fe39b340a64a41fab50a91c70c7d2751b5d51c272d51283c45578931a87abe3dc1d7392d1766354b23ed46bbbb3112731477ba109d4f5e610d8a8ecec58b19014b0825961596ff76611ee0cb54c96a2940b22b91eaa94e1253595c256c063454406d5cb81e794da3608ab07cc4efc96abbd0d7495a3e9a82edbc709bebe3ef250b023eca61512b00b3ae9d1fab1afaf7c126d6b8a8fe16ff96cdda9be6b29b993366ac4010f112bd360c2155121f4dc23dae3e538a7409ccabde8e2a0b576eb93750cb61859548e19d3b26ce47178388c92b844569c095334bfaafe0859aba7578e9e97d67aeddcaaf6c598856bd620815f5a65dbce1a7410cadd938a9f6ea592167e140b3ec05b7a87da6011d038bb996fd7d900d957f8c631cab559e8c83db0f62b751a620cd63a4a86b4ca0a97f88322675b3123d474e3c172603a1f15367563a03f20a77e928cd984f6e5e07f191f6cfceaf0b8e554e3ae9a15b3d32cf85f7dc99c0dfc6bd7b1a91f7dc1c040452ac0535ac3d842babbd64d4d04bab78daf7da0cab27e36c2874c8d792a64acfb034ec1c6a21f2e92e81e595168fc5896bd49088bc40171ac29e2e5ea6f1d847c2e8e5c6ace4a9d3ced935aa81756a0d25f5324737d7ca401f2db962b670450e19697979f47d2a98bb2c7f26fe9152778b9231f9e38055ef570032fd76701c962cc984c39fe8060213cd33d5dafb1851ad30f9c3c65e765e0c5276486d4aae30ae581868009922ececdc60e153a2ee83b39ae47b12468fe3ca13388be08ba5cc357283438cb6648ea0693ee4822b2a8315681d5a9e9b011288997853e9fd71b3fd34ac1099b88b2fec98063b994ad1a0efdbba1074f95d890a58ccb0bdd85494755b13f3b712080302c2a3d3a056da31c629d5225d1262cf4f98f42090115e2e8d42b1faa9ea864479b2f387ad1dbf4c1ab86a82220121694a4d62b0e9efe9feca1df03263559e397e2bfa53caad262c8830459dd516225d344999a26f613ec4b906dc7b9166725d3ddbae555e9a5f6a191ba833db55a82b4c69c98ed2099c4a38a278ea92d197457624dacee4390bb5c98365c4d4910ac3482ffe98f7ea48da8f4b7f4d4e3a684309dad0a043c4b96767ff1379fda5e2048a18033f387b26675cdf2f39d4e2ebc32fb4b319018b462b452f6c00ab2b843f3e1cb2c73b4f9d22991b0e7b178032422f3672b10de0e7cae55525ecc485ce42d85a3e17589cc68b47ed495a2e0a68e9fc16f4224f3a5c2f93e80265a9e7ef7bb7ab3de07459c65273fcaf88449a59b10b66cef7c28164b584b756a3f521c3af1201f261e5b50f4142ea87099db0666f9433fecdfe1caf6ff696a7b1023a0309440023d66fcea188c88d65f1cb5941de0a992e79ee1aea09cc9303779374c29ad1f6b330fb996a0faef5381265de3ed6bd31fed00e9783081ed93b253ab9fc69e3a47371c0bc70deaebf4a02b98e64d99c7dda700e51f76edfb182a725188a7760c34d971098c2c2c0d17917f7184e9d30f93ef1d08af2b2099ec902ba2ac232c362b239892e1162e4c9e2fbf8b13da7fc61e28dc253913a6382ded4c98dee3ea4957ed00bac118622fdcd3685f762ab2f494b91ba37208a262c586b90bdee32fd24a2e4ade50691a2272b9f1c0e668fd4f68fc01baedcebba91574e2345ace24a83caa8f5443551fa30c7e06c8051b047184d8bacb765ff2d0d0afc02fb3960b860e4ac9642a114bb0a9a6ec31a4d05dbe7d3d42d49f077b2adbfb3043e288176feb9be8b3c49675c7e9dbd5219c93c4dc58e605eaae574b819875a13973789141ff2e8bff8964d160f1bae7ac8e36a95edf84e2ef6e9090ee44d1f28ebdb9923362049e14d26a065ac3d240d9765b8530f189c316002dbde6915547daf439af70a88010b7cc52b5472796be451703867ae21966294d3eae65a9ec79d037475c7eafaea780b3e2085d2c02d0f21c0e8098545c294b50389854677baec680bfcb32278741ce0ae8d5955662d4e7c711de7a03da46ff4005bb10e27d6baa03d949c87cdcb0fa8c17606c90c6ece5597dc28bd34c899dd1f1ab7102d9c762ad32a0a853f96287342addc665729067bd52587bc8323d6f272350ccd703456b285f4b109d8583df39c74645235f44d6def33e835f68c3ffff1ce1ea32292ef25c8db4e403764156dfc285f3f13151a79f6dbbd12ede0f56f588ce3cdb02de88dd2377ac9b4680cc07fb19674d618787ab9d63241a00e64cb46f3437913c098d02237bf063004259b7fb1d1068b8b22bc75f0dcf5ea96a88e74d4049fa7a415d0cb63ecdb1ff252d373729a306d4845f1dd10f3a26b094c6f6a0de21889e535999921ab571c565b5777d46afe6e6ed33b054cf5f21458ff0f92a81c1258105800bf4470a9d9c6d28156e525a3fa2087e8483a068f15801ea0e324f8d59dc5ecbc843c71978d3064bb6332087456a383e8d602634616f9dd48fd68da24c1e7d6e4aec25a2aa13118ed84146c285c8c42bd325afb40c9e3f71adf5705cb905949fa5039b7b2eeebd07541ebfee6939f2330d61ff38bdbd41b7b5d19256a3b260053eabf3c91bf8433a68413978e3c83382593ae2f5eade1a20d38226f5637ea46a0fc20d4fbf03b4aae32a371d12665ea520c700d3d769ebf0b1037cb5860af126a359a10cfdeaa8f3edb9ae3103e127cf93b5141d5293ee94bec8266e75f8634219af04713ec5c46631fcfaa1f3c878cab41fc20c3e34dc65e33464d8042dc1e16c60c477e032fd5c42af71a958e4c71d84916e2a2303c5ba66c4d3fb46b87240c6e102501799d8b5cc16907c8f2ace7bda49db1b76a21e57834e878703f331b9fd59924ebca23da8bc646ce305210645802967287df11352939351283ff172c8051dee2b91bd99cc880d620022a5eaed1c678e6ec7b78c8ef80090c1c7319ca065ad0952321f4476e29398f8c933191e589727bcfc59676b5eb80e107b28335be2a44b7f7a6dbd53e71ac74955a855835d4e466cb88302b4c6c4156a474059bb33d4ab034a19bfcbb337f66ee7d7b290935f2acfeb0d409e7cbbf68a33e16a05f30a62af63d260f58fd72f73cffc800edf7dd41f72241279d666338bdefd567aee3010260d818e93610045cc90b75888417a3022204abae4aa83f86b239a41d3d3c25f20294831fdf29067dad0cb188f12d51b2900ab60cf55ab37181be383680df5fe4ce0dc5896d4cafe6d6ef026e10dccb8b4944c9236d23e2692650aa2123ac83305c4ea1928c1e6ee91cb4870f74ba586e08493a7a7fed89bbcdc8171b331e4810742cd0242c11988d52c006f29008ce26ac1cff4d34c6f36e51746a2630a7d39d1d00ee840ada47a94d9405407819159581ebadf6b495776804ee947fa86f8c9745b758a57d285b37fa33974661c320d69c18cd0759d468d9a2048ddf03c872945c72e48a8dfb634d9526664c33fd5ff4c8e7df33478b5cc92f274678fd1edcc942227cef5a30d8446f23da27642ef04e78ff9713f96ddb6cbd681ddfbe1e2862e0cc93ea89e58b4fc4d4b69d589e7e0b1b418dcf0c518fedcd3330d323f17475aeec41292cc4f4d2be193ad3887d0013d81bd423bca38a2039b2fd19342d24498e691a8d5e644e77e762c2726a3a9f356098aa480ed95e1354a3d8936d84df69d7a5d4874be8f542be7aafc4bfc0cfff7aa6125869149a18b", 0x1000}, {&(0x7f0000005a80)="6c8292da9f0dfe77b137b9523b061d8c228c72a5b6c2e3607bd4ffcdba854c0859256fbdea16b8876779ac57992639d764611567902be703835763477ab040d9d91426843f880502b308353e56cd396635876344259f2f9aa660eec6b00285c246688b557aba4bd1da4e40ff213b48f7c5de1759851725db95bab877cb874bf9d64beef24e004fc425768d4b9da38812705a0bb1723b4d67bb6494e2e8deb7505de0eb974384140e6cc7f58ccdd95342edaf1436ba7e013de8", 0xb9}, {&(0x7f0000005b40)="2b28370e9c6897f70ebe0f50a33c100532baf3b8120d72f565e3a1755358dfb00b18b800fbe903c91d9f3b879611546fb20063cd9b0cf476f648da2c9d20f5a7700e6b130a40fb59e0d302f7f9508fb7107cef3fc7393b476eeba0354aef5e4bb846a830c7ebc0776aa0dc0c2161c2909803f64353ffab50417dbd5f85401568341a98ec0849e21daa5e2e2ac59ddf38737a1f69da65f790450f7dd84f223f1b559d6f9d70b3c1341434876f474bdb839ff0578d43d8c1e474359ab71b32c5c04d0b83427ebda88cb4faa27cae1b6d381b05fbb215085957b4dbd1", 0xdb}, {&(0x7f0000005c40)="04276be681794ef8835179a184f64771986e354f427b9032e03825c17748862294887e4140e214da7ca859e14df7e1f67c46ce69cbae518b6d7f8707304fe780f3dcdbb498ef99f594a0022e224914ac0ddbfe56828d89e2cab57d357c2b4daf0f3142e60e950db2534e65bb", 0x6c}], 0x9, &(0x7f0000005d80)=[{0xb0, 0x10b, 0xffff, "153ec232f39252404e82829a7dd42d0094751b8fd7ddc1e46ecfd470de1681f4455cf9b643f7dbd68d2c1ca1f549ca9fc5321d15954050de17e3e81548dac80c83b4bb0e3e6b01d1348bec6c40969e44872e1008757b21732a922ae35977f7f894034446199609ecf8b0b2b395acfa2cbc0130c78a5ee786e3e8a4942538b79cfe25d31162e8e85bdfd5c73b8c98e0b9dd84cd97ab5af5a54cb601b23c"}, {0x58, 0x29, 0x4, "71bb1189e31c875af370925297c621b6c3c63905c12c3401bf7ebde2b29a6d47cd1962a1fa3f7ebb80d7cc55c575cb917f64c6084aa5a706dc4f96ddada88ff6bab5a7df6e74790d"}, {0xe0, 0x11f, 0x401, "67f84365f8c89849bf13590c32d351f6ebeeb87bd237254d45f86190f48fe2b7cf76e7cefb3fe2f579e469b9d73afbb6bc7cdc6d4e26f6f83ea328381018ec92a4cb635213bc054fbbf12124e36f28adca047d054bc64fe7f111fcc528b4af813e7ad11d6e532dc1caa4f17eea5bc318d305b66506d7b19aff2f4cb05d03d72ab88c42414530be797f72eb3187b2d097e6c6c4c2b34ad66308c5b93bbeccd2a85d922ca70db201f76543bd6ac2e751dd7818827632b9d738c8485561a500fc908d28ae855c876fc24609b8c369"}, {0x60, 0x117, 0x18, "c8cc77a953963296519b2ec2c99d367701de1501cdf621a86045de4f4617c445fc3037124ead9fcfb1daca0b88cbba1f4b783dd6c0c943ef1b5eda39e13e9602156d64e479b25b59263ad638"}], 0x248}, 0xffffffff}], 0x6, 0x4) inotify_add_watch(r0, &(0x7f00000001c0)='./file0\x00', 0x0) ioctl$SIOCAX25NOUID(r0, 0x89e3, &(0x7f0000006180)=0x1) lsetxattr$security_selinux(&(0x7f0000000240)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xfffffe1c, 0x0) accept$ax25(r0, 0x0, &(0x7f0000000440)) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) accept(r0, &(0x7f0000000340)=@xdp, &(0x7f0000000200)=0x80) bind$nfc_llcp(r0, &(0x7f00000061c0)={0x27, 0x0, 0x1, 0x6, 0x96, 0x4, "122f9a78625c01dcb85d30ff6da9feb288272b4ceda6a7cd76f0eaaa57d786809d91635b0179617adc1b9b82d3011e4ba79894b2267b556b172f8ba2341c88", 0xc}, 0x60) 13:32:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x4000}, 0x80, 0x0}, 0x0) 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 2662.901842][ C1] net_ratelimit: 12 callbacks suppressed [ 2662.901849][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2662.917942][T11372] QAT: Invalid ioctl 13:32:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 13:32:45 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) write$FUSE_NOTIFY_STORE(r0, &(0x7f0000000040)={0x31, 0x4, 0x0, {0x3, 0x5, 0x9, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, 0x31) [ 2662.990023][T11545] QAT: Invalid ioctl 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:45 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000340)={{{@in6=@mcast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@broadcast}}, &(0x7f0000000240)=0xe8) lstat(&(0x7f0000000440)='./file0/file0\x00', &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0}) mount$bpf(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='bpf\x00', 0x900000, &(0x7f0000000580)={[{@mode={'mode', 0x3d, 0x8}}, {@mode={'mode', 0x3d, 0x10000}}, {@mode={'mode', 0x3d, 0xad8e}}, {@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x1ff}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x8}}], [{@dont_hash='dont_hash'}, {@defcontext={'defcontext', 0x3d, 'staff_u'}}, {@uid_eq={'uid', 0x3d, r0}}, {@context={'context', 0x3d, 'root'}}, {@fowner_eq={'fowner', 0x3d, r1}}, {@smackfshat={'smackfshat', 0x3d, 'system.posix_acl_access\x00'}}, {@subj_role={'subj_role', 0x3d, 'vmnet0user]cgroup,system%(+ppp0selinux$selinuxeth0eth0+cpuset'}}]}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000014000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:45 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x40000}, 0x80, 0x0}, 0x0) 13:32:45 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 13:32:45 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 13:32:45 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040)=0x1, 0x4) ioctl$VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000080)={0x1, 0x6, 0x3}) ioctl$BLKROSET(r0, 0x125d, &(0x7f00000000c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_STATUS(r0, 0xc05c5340, &(0x7f0000000100)={0x3, 0x3, 0x8, {0x77359400}, 0x80, 0x6}) 13:32:46 executing program 1: r0 = request_key(&(0x7f0000000240)='pkcs7_test\x00', &(0x7f0000000400)={'syz', 0x1}, &(0x7f0000000440)='security.selinux\x00', 0xfffffffffffffffa) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000480)='/proc/sys/net/ipv4/vs/snat_reroute\x00', 0x2, 0x0) ioctl$VHOST_GET_FEATURES(r1, 0x8008af00, &(0x7f00000005c0)) add_key(&(0x7f00000001c0)='syzkaller\x00', &(0x7f0000000200)={'syz', 0x1}, &(0x7f0000000340)="f79853509d58b79835399e4d939ff6f12c50645c0592397242533dbd13dcd53b8fb3883e71a20f44e098a0ce9950053db89459dada2bd7a99101a9118849499e19147658fb8652b14e29e0639f4164c1f37d29580bce7cb3b58fd19ea6ce35ee68915f35feb939564bbf4982c8366bc3aae5d852800994d37da07d76786e1cf81f8022a1ae8e555fe26602cfcd5f", 0x8e, r0) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) syz_open_dev$swradio(&(0x7f0000000500)='/dev/swradio#\x00', 0x0, 0x2) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f0000000600)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB="0800000021f3beeabd19fc30473075d47cdc60bb3a94cc83ce543ec9e93b762f56b5ef4c2e1ed3d22786070c4ae7178e24186ac49065607725402763d88079d67542dad99c088947437a6a57fcaf5b93728149e571ffff38708ab5f248faf811921bec291db7368fcaaf925e68dd10ba9665e4d7dc558ae9ff085de4cefb7cfdc4dd2cf0bc833a268307a3fef258e6e29b1cb0ef5abc68d24ea74799acb1e03ab14b2b9cd7bcdaed5d28619e5d9d5c78399177d359d73eb0e24e96896152ca8ced3f6bd000d8446c9e5fe6a824276cc652c493d896789654f1ce924ba014de", @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000160100000000000000040000000000000010000000000000f51f00000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') getsockopt$IPT_SO_GET_ENTRIES(r0, 0x0, 0x41, &(0x7f0000000080)={'nat\x00', 0x89, "f22872995fdd7cee02bcd2433655b8159c23767ad29f4b3b776d30d1ab732842544b422950029d15fb4eb93bd5b88f5668dacc8cc7f0c909e992e3aacae4093c4ebe6ac06c853a51701fe1de543503492c0f62446efb16a74f2771fa95bbfd9af4554ad15aa3106e680642b0ea0eec9395f348b2f1b996eac33cc1f0228e420fde0d826d166ed7a46f"}, &(0x7f0000000140)=0xad) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fcntl$getown(r0, 0x9) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$VHOST_SET_VRING_ENDIAN(r0, 0x4008af13, &(0x7f0000000040)={0x1, 0x1000}) 13:32:46 executing program 1: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {0x1, 0x40000}, [], {0x4, 0x4}, [{0x8, 0x8}, {0x8, 0x3}], {0x10, 0x2}}, 0x34, 0x0) r0 = getpid() ptrace$getsig(0x4202, r0, 0x3, &(0x7f00000001c0)) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000001000040000000000000010080000004000202000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x1000000}, 0x80, 0x0}, 0x0) 13:32:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 13:32:46 executing program 5: syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) modify_ldt$read(0x0, &(0x7f0000000040)=""/114, 0x72) 13:32:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dlm_plock\x00', 0x4000, 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = creat(&(0x7f00000001c0)='./file0\x00', 0x80) ioctl$DRM_IOCTL_AGP_ACQUIRE(r0, 0x6430) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x2000000}, 0x80, 0x0}, 0x0) 13:32:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 13:32:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xfffffc49, 0x1) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80081, 0x0) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000440)='TIPC\x00') sendmsg$TIPC_CMD_DISABLE_BEARER(r0, &(0x7f0000000540)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r1, 0x0, 0x70bd29, 0x25dfdbff, {{}, 0x0, 0x4102, 0x0, {0x10, 0x13, @l2={'eth', 0x3a, 'bpq0\x00'}}}, ["", "", "", "", "", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000004) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02ffe340010000000000000000000000080000000000d95a", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) getresgid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f0000000340)) r3 = semget(0x0, 0x5, 0x34) semctl$SEM_STAT(r3, 0x0, 0x12, &(0x7f00000003c0)=""/98) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000080)='system.posix_acl_access\x00', &(0x7f0000000380)={{}, {0x1, 0x3}, [], {0x4, 0x40000}, [{0x8, 0x1, r2}], {0x10, 0xfffffffffffffffe}}, 0x2c, 0x3) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:46 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000000)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 13:32:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="02000000010000000000040000000000000009f81b38", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000000000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = syz_open_dev$vcsn(&(0x7f00000001c0)='/dev/vcs#\x00', 0xffffffff00000000, 0x60000) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, &(0x7f0000000200)='-\x00', 0x2) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {0x1, 0x6}}, 0x24, 0x0) chmod(&(0x7f0000000240)='./file0/file0\x00', 0x60) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 13:32:46 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, 0xffffffffffffffff, 0x0, 0x10000007ffffffc) 13:32:46 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 13:32:46 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x40000000}, 0x80, 0x0}, 0x0) 13:32:46 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000200)='./file0\x00', 0x8) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:46 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:46 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = semget(0x1, 0x3, 0x1) semctl$IPC_STAT(r2, 0x0, 0x2, &(0x7f0000000040)=""/190) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000340)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000380)=0x1c, 0x800) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000240)=0x10000, 0xfffffffffffffd6d) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:47 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) 13:32:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffd) keyctl$read(0xb, r1, &(0x7f00000000c0)=""/196, 0xffffffffffffff67) getsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000200)={0x0, 0xffffffff80000001}, &(0x7f0000000240)=0x8) utimes(&(0x7f00000002c0)='./file0\x00', &(0x7f0000000300)={{0x0, 0x7530}, {0x0, 0x7530}}) setsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000280)=@assoc_value={r2, 0x3f}, 0x8) 13:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 13:32:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0xeffdffff}, 0x80, 0x0}, 0x0) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)={{}, {}, [], {0x4, 0x4}}, 0x8, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$VT_SETMODE(r0, 0x5602, &(0x7f0000000080)={0x2, 0x81, 0x80, 0xb768, 0x1}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$RTC_ALM_READ(r0, 0x80247008, &(0x7f0000000040)) 13:32:47 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$zero(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/zero\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000200)=0x8f9a, 0x4) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) statx(r0, &(0x7f0000000240)='./file0\x00', 0x4000, 0x14, &(0x7f0000000300)) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 13:32:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) 13:32:47 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000080)={0x53, 0x7fc000, 0x1000000000, {0x101, 0x9}, {0xfffffffffffffff9, 0x7f}, @period={0x5f, 0xffffffffffffff67, 0x8, 0x0, 0x400, {0x2, 0x800, 0x100000000, 0x7}, 0x2, &(0x7f0000000040)=[0x7fffffff, 0x80000001]}}) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000200)='/dev/cuse\x00', 0x2, 0x0) ioctl$FS_IOC_SETFSLABEL(r0, 0x41009432, &(0x7f00000000c0)="5133f121d330eadbc098a42395945df7596810a1bbf251d578414071faf73bc5913dc5d50e2363fbda2bbfea4116996127686722eb0b13d931adbc61ac380e971556622c084e46395e088f476696eb7b62c2157b4b40ce6ea97bb66ad637bed0a9a04a4bc074e3628c1c0837e2672b117b6e933199f3a84f25aaf4bc364f0ee743fecc2283b1f61cc5c83a32249def2af48cffaf11bea838ab59b965dd2e1f98503fa4a8e943e8f43920e90220b459791c60c410f46276492d36c0df1874f2fda6fc4d95dbb90c2c1e899b842cde58717f5bf4d4acf41165f1fa1a3d3ce477773c9a8817af587b0ac99d6827b2fd980ed8790a956920d9a86588609d8d95093b") sendfile(r1, r0, 0x0, 0x6) 13:32:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0xfffffdef}, 0x80, 0x0}, 0x0) 13:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 13:32:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000f35e0000"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x2, 0x28000) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r0, 0xc04064a0, &(0x7f00000003c0)={&(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x4, 0x3, 0x7, 0x7}) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:47 executing program 3: openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r0, 0xae60) ioctl$KVM_ENABLE_CAP(r0, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r0, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000200)={&(0x7f00000001c0)='./file0\x00', 0x0, 0x10}, 0x10) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) [ 2664.981844][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.987673][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2664.993498][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2664.999238][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:47 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 13:32:47 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 13:32:47 executing program 5: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KDDELIO(r0, 0x4b35, 0x403) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, r1, 0x0, 0x7, &(0x7f0000000040)='cgroup\x00'}, 0x30) fcntl$setown(r0, 0x8, r3) 13:32:47 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:47 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0xffffff7f}, 0x80, 0x0}, 0x0) 13:32:47 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f00000001c0)='./file1\x00', 0x200000000008) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000000010f6bbd40dac1ac92c4a28d100000000"], 0x24, 0x0) lsetxattr$trusted_overlay_origin(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000240)='trusted.overlay.origin\x00', &(0x7f0000000300)='y\x00', 0x2, 0x2) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = syz_open_dev$vcsn(&(0x7f0000000340)='/dev/vcs#\x00', 0xfffffffffffffff7, 0x4000) getpeername$tipc(r0, &(0x7f0000000380)=@name, &(0x7f00000003c0)=0x10) fcntl$getownex(r0, 0x10, &(0x7f0000000400)={0x0, 0x0}) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000500)={{{@in=@empty, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@empty}}, &(0x7f0000000440)=0xe8) fstat(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000480)={r1, r2, r3}, 0xc) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000040)=0x3, 0x4) 13:32:48 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 13:32:48 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x900, 0x0) ioctl$VIDIOC_UNSUBSCRIBE_EVENT(r0, 0x4020565b, &(0x7f0000000380)={0x2, 0x40000000000000, 0x1}) setxattr$trusted_overlay_redirect(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='trusted.overlay.redirect\x00', &(0x7f0000000240)='./file0/file0\x00', 0xe, 0x2) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r1 = open(&(0x7f0000000040)='./file0\x00', 0x8000, 0xc0) sendfile(r0, r0, 0x0, 0x8) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000100), 0x4) ioctl$KVM_SET_PIT2(r1, 0x4070aea0, &(0x7f0000000080)={[{0x79a, 0x1, 0x2, 0x0, 0x3, 0x200040, 0x1d0, 0x5, 0x4, 0x6, 0x9, 0xff, 0x6}, {0x101, 0x3ff, 0x9, 0xfffffffffffffff7, 0x1000000000000, 0x0, 0x3f, 0x1000, 0xffffffff, 0x7, 0x1f, 0x9, 0x2a}, {0x1000, 0x9, 0x3f, 0x400, 0x8, 0xffffffff, 0x9, 0x6, 0x4, 0x5, 0x5, 0x4, 0xff}], 0x7fffffff}) mmap$perf(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x80010, r0, 0x0) 13:32:48 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) 13:32:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x4000000000000}, 0x80, 0x0}, 0x0) 13:32:48 executing program 1: r0 = syz_open_dev$vbi(&(0x7f00000001c0)='/dev/vbi#\x00', 0x1, 0x2) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000400)={r0, &(0x7f0000000340)="6d6871d24c47c3b6b3051758ff4a292ab5e72b6d21909a229fe4f5997b122036c8eb061b651b7af6854eeb94df1194b5f18b6406e6eb04bf17305c53af3c68b6897fb2a62a287578b5a340e6c2dbd739b2414fdf377345e624ab9746d2baa40d1b37b13b5b39a37979dec1cabe1aba7914053a8888ad6a1f5fc849174660def71426a0701c497a148a71b935b56ff850c85ee7d405a0ebc1045f845746b37061f49538397d1b40189a9a28ee3579bd", &(0x7f0000000200)=""/98}, 0x18) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x100000) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2665.621793][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2665.627633][ C0] protocol 88fb is buggy, dev hsr_slave_1 13:32:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 13:32:48 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x7a00000000000000]}) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000100)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:48 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x40000087) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='net/ip6_mr_cache\x00') accept$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, &(0x7f0000000240)=0x10) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x100000000000000}, 0x80, 0x0}, 0x0) 13:32:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fcntl$F_GET_FILE_RW_HINT(r1, 0x40d, &(0x7f0000000080)) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$sock_bt_bnep_BNEPCONNADD(r0, 0x400442c8, &(0x7f0000000040)={r0, 0x10000, 0xffffffff, "be940063bff5ab2201c3f6df21139993bb8beb6f1c2866c5a80553fa4f5b1c265c9d96b1975164899829dd8c4d01054c81709f"}) 13:32:48 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:48 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$media(&(0x7f0000000200)='/dev/media#\x00', 0x1, 0x0) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000240)={&(0x7f00000001c0)='./file0\x00', r0}, 0x10) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:48 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 13:32:48 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:48 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) lsetxattr$security_capability(&(0x7f00000001c0)='./file0/file0\x00', &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x3, 0x8}, {0x1ff, 0x81}]}, 0x14, 0x3) 13:32:48 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$LOOP_SET_FD(r0, 0x4c00, r0) 13:32:48 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3]}) 13:32:48 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x200000000000000}, 0x80, 0x0}, 0x0) 13:32:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000001c0)=ANY=[@ANYBLOB="020000000100000000000000040000000000000008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="10000000000000002000000000450000cd800ced2c339437a31192a63a56051f96e1060ca691dccee9277fad4fe98c295be4cb183e662ed71eb3e6b714e0ad32e269a425f36c7464e072aa06c8f6342ff5a05d4a5838e0403866"], 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000500)={0x0, 0x0}, &(0x7f0000000540)=0xc) syz_mount_image$gfs2(&(0x7f0000000240)='gfs2\x00', &(0x7f0000000340)='./file0\x00', 0x400, 0x2, &(0x7f00000004c0)=[{&(0x7f0000000380)="c971fe633ac401a35c3de8083ed6f3328cc5526581a9f20620713bef6be41b9e899cc301cba1948b66b9810063c96aab70e94b99a118f6633a78928e79cc5199cc2b07251acb7b5fdb387560a0e05b2a16780d23cc74aa78fb", 0x59, 0x2}, {&(0x7f0000000400)="5f82ffb107ea996bc46d037c8f03ac1d2e0e5b5841b5202ce714a98b6f5919483a30b775e0256b991d5596247551b92c8b8a7ea3b501f6bde6d8ba0d6690ecbe4d9037c0f2448b9482cc3c488e65c426af3004a5f19c2a57e0095e48995504f144d5da516729fb0de9b368d84279e6931de729bb554fc024a0482934857b9c5f586b1913ee981ea21c10a00bba234bc8f811000dade68954852fb8cdc032cb41aebf702adde4bd697d65e03d055b59bf0733905d2b84db47033b34", 0xbb, 0x1}], 0x400, &(0x7f0000000580)={[{@data_ordered='data=ordered'}, {@locktable={'locktable', 0x3d, 'system.posix_acl_default\x00'}}, {@localflocks='localflocks'}, {@locktable={'locktable', 0x3d, 'vmnet0[vmnet1'}}, {@meta='meta'}, {@noquota='noquota'}, {@nodiscard='nodiscard'}, {@data_writeback='data=writeback'}, {@suiddir='suiddir'}], [{@smackfshat={'smackfshat'}}, {@smackfstransmute={'smackfstransmute', 0x3d, '^ppp0lo/#keyringtrusted%wlan0procnodev-$$%wlan0vmnet0nodev'}}, {@fowner_gt={'fowner>', r0}}, {@measure='measure'}, {@measure='measure'}, {@pcr={'pcr', 0x3d, 0x9}}]}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4]}) 13:32:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_refresh_period\x00', 0x2, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) [ 2666.440272][T17613] attempt to access beyond end of device [ 2666.446503][T17613] loop1: rw=4096, want=136, limit=2 [ 2666.474172][T17613] gfs2: error 10 reading superblock 13:32:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x4000000000000000}, 0x80, 0x0}, 0x0) 13:32:49 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5]}) 13:32:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) ioctl$TIOCSLCKTRMIOS(r0, 0x5457, &(0x7f0000000040)) 13:32:49 executing program 1: mkdir(&(0x7f00000001c0)='./file0/file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) creat(&(0x7f0000000140)='./file0\x00', 0x0) 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 13:32:49 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:49 executing program 1: mkdir(&(0x7f0000000200)='./file0\x00', 0x8000201) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0xffb5, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6]}) 13:32:49 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0xeffdffff00000000}, 0x80, 0x0}, 0x0) 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x0, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 13:32:49 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) mknod(&(0x7f00000001c0)='./file0\x00', 0x20, 0x2) chmod(&(0x7f0000000540)='./file0\x00', 0x10) r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x0, 0x200) fsetxattr$trusted_overlay_redirect(r0, &(0x7f0000000240)='trusted.overlay.redirect\x00', &(0x7f0000000340)='./file0\x00', 0x8, 0x1) 13:32:49 executing program 5: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4000, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080), 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x4, 0x80, 0x0, {}, {0x77359400}, {0x0, 0x20, 0x3, 0x2857}, 0x1, @canfd={{0x0, 0x20, 0x7f, 0xffffffff}, 0xb, 0x2, 0x0, 0x0, "2213486a902aeec9b159046e87f5627e2dbbd74e5f20ed61c9c88f42d8d402a438f3c9bf079d88acacc460a5c0d52df998c86d37cbb1faaf3d5c400a7746a70d"}}, 0x80}, 0x1, 0x0, 0x0, 0x8040}, 0x4000000) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pipe2(&(0x7f0000000000), 0x4000) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) [ 2667.061850][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2667.067721][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2667.073651][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:32:49 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:49 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7]}) 13:32:50 executing program 1: r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_SET_CPUID(r0, 0x4008ae8a, &(0x7f0000000200)={0x2, 0x0, [{0x40000007, 0x7fff, 0x8bd, 0x9}, {0x6, 0x4, 0x9, 0xcf, 0x80000001}]}) mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:50 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 13:32:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) fsetxattr(r1, &(0x7f0000000040)=@random={'trusted.', '&ppp1-ppp0keyring(,\x00'}, &(0x7f0000000080)='/dev/cuse\x00', 0xa, 0x3) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0xffffff7f00000000}, 0x80, 0x0}, 0x0) 13:32:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) r0 = syz_open_dev$swradio(&(0x7f00000001c0)='/dev/swradio#\x00', 0x1, 0x2) ioctl$BLKROSET(r0, 0x125d, &(0x7f0000000200)=0x8) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) 13:32:50 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48]}) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:50 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 13:32:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') fsetxattr$security_smack_transmute(r0, &(0x7f0000000000)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) ioctl$PERF_EVENT_IOC_QUERY_BPF(r0, 0xc008240a, &(0x7f0000000140)=ANY=[@ANYBLOB="08000000000000000000000000000000001500000000000000000000000000000000000000000000e8ec551e13d86295c37850f326f33568858fde75b0925f3dbe03f51ba77e3a"]) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000000100)=0x10000) setsockopt$RDS_RECVERR(r0, 0x114, 0x5, &(0x7f0000000040)=0x1, 0x4) openat$cuse(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/cuse\x00', 0x2, 0x0) sendfile(r0, r0, 0x0, 0x10000007ffffff6) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r0, 0x40505412, &(0x7f0000000200)={0x1, 0x100000000, 0x3f1, 0x0, 0xf}) 13:32:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000200)='/dev/dsp\x00', 0x0, 0x0) ioctl$IOC_PR_CLEAR(r0, 0x401070cd, &(0x7f00000000c0)={0x100}) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f0000000340)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) mount$bpf(0x0, &(0x7f0000000400)='./file0/file0\x00', &(0x7f0000000440)='bpf\x00', 0x480, &(0x7f0000000500)={[{@mode={'mode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x5}}, {@mode={'mode', 0x3d, 0x100000001}}, {@mode={'mode', 0x3d, 0x7}}, {@mode={'mode', 0x3d, 0x200}}, {@mode={'mode', 0x3d, 0x8}}], [{@audit='audit'}]}) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="98e200000000000000000000040000000000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r1 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f00000001c0)={0x5, 0x84, 0x2, 0x3f, 0x5}) accept$unix(r0, &(0x7f0000000380), &(0x7f0000000240)=0x6e) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:50 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c]}) 13:32:50 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 13:32:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x2}, 0x80, 0x0}, 0x0) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:50 executing program 5: getsockopt$sock_cred(0xffffffffffffff9c, 0x1, 0x11, &(0x7f0000000040)={0x0}, &(0x7f0000000080)=0xc) ptrace$getsig(0x4202, r0, 0xfff, &(0x7f00000000c0)) syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r1, 0x0, 0x10000007ffffffc) prctl$PR_SET_FPEMU(0xa, 0x0) 13:32:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) modify_ldt$read_default(0x2, &(0x7f00000001c0)=""/119, 0x77) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f0000000240)='system.posix_acl_default\x00', &(0x7f0000000000)=ANY=[@ANYBLOB="020000000100000000000000040000100000000010000000000000002000000000000000"], 0x24, 0x0) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) r0 = socket$pppoe(0x18, 0x1, 0x0) sendmmsg(r0, &(0x7f0000000a00)=[{{&(0x7f0000000340)=@in={0x2, 0x4e20, @remote}, 0x80, &(0x7f00000008c0)=[{&(0x7f00000002c0)="273d0d538767b1512172aab0fed5c702c2c6be639606e82bd2f37afaaf7bcbf9e4dc9dc7443973d5", 0x28}, {&(0x7f00000003c0)="17b1ceea3111a72a7688163935c96b77b89e2c580f182e03db46320df5ca4b2d31", 0x21}, {&(0x7f0000000500)="a1ccff0e34c29af40e47de883d0cfb9c53d1b4e2d5ad4807b2a59147736e2af7e339b5fd339ac672650f346962af453011ea140cb0a1100310ac348cf94ad20ce8243209553dd3bef921ecdfdb6db1a3a78f9a879259e708b5d1d8f84531d3bed619c6b5583dc8f8f7af68890db781b19a5d841e8a3d7aaf7c0a73af1f957a947366c8cbb299dd9e8dd23f3515ddf4caabcb883fbeb68f6ca1c67c6c89b200e8e37127b4d3c4405bad218c1fa7527b51dd66ca981774e7882a2e6a87ab6107cbe4f32a694841c7174b8183b49f000c31d74d679a4f3a4c486b43cce808a937e67e682fe9410ba6163074de0cc1fa347a49dbf732788d6c72", 0xf8}, {&(0x7f0000000400)="bdbaec0975375628eeb6469b7769df19f7", 0x11}, {&(0x7f0000000440)="c8f2b9f24a9807daee82fe3f23c763f2eeaf0176c3269f8ede848df307a42fadcaf3e404f4d6c0b36c02eb4c94d967f6f0556351c3e03a679909f48ffc04880c39b2b21272d388976be6a8fc389897158339e2c5be1b279087bbf58ef9c717ee929b25bb55bfef86720f6bf3644102a0c06d224385", 0x75}, {&(0x7f0000000600)="78a20b105b72efcdc4754ba64e2259842ff9d73dcc0d334a5ced8653ff0b42e571e3fe05312e29aaa1ff74f186501828eaccda931c69d0f550005884f9190e96e642f5c3d73566d609e493dd7f6aa4463217fc311480ba3018a39982ca861b9a4aa6b12f6e0d8bfe0ee361fcbb5e24c71f05e1b1143dd4c52522b856673cf691baa5b12738d5b5bd329c74647c761ef8ed99db", 0x93}, {&(0x7f00000006c0)="dc33778bb87755e19ff006c0767939d3432eecd38b9f3e076012645211ae0bb8731adfdc9b0e7a7dedfae9356e62043205c0050884672d0a13475c635422c0bbfe80ae06b1c047356e7da5b3c530394594346855edc59a6b642f432d4d3c0268f10ed2cb5123efef8561ec8244d556148632b1aa812ff32656d6a424d7970aa544fcb5e8a855fc8bf5187e51e5b61939bed7f1eb870de559f34a9b42bcf74a6201e781bbc52a4ac4181120993464a1d4eb8290ad85760f3694be12f0b6a4e26caffa496fad5e8f194743d404573247f27584dce32bd8418015873c10231db8200d74e1800b16cf809f80754191005866b825a28ced51", 0xf6}, {&(0x7f00000007c0)="7ebbe80f39d39adc81a226c7ddacbe3d36446e1c9028ca030e0bc5f352c78f2de75b49", 0x23}, {&(0x7f0000000800)="e20b2aac540275e149ae7742d8311d7005eded64bbd4cd8707e95f36d1462c1cf03c7af75c30721e74a58bb03b7d4c282c31c77268f8fc594e0f5c00a4f2e8f89d3882e36acbb0eb39fa42b3d02154e13216bc02b7cf46fab0a3f163d7ced8afbd0a768814fc45102e8defdf99b3d39b92b27eae67fa1a28852261ff264e1e4fb04f", 0x82}], 0x9, &(0x7f0000000980)=[{0x68, 0x117, 0x1f, "9483a7761be9394a8b218c8d99a5a374abefb3f10abce2ca0d601d011117d23974709516fb81e99d773cab42233f7b3cd27262362be48466866b3b15544ce2cbaf7356729166e8a8894c50d5ae6a295c09"}], 0x68}, 0x6}], 0x1, 0x10) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:50 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x100000000) sendfile(r1, r0, 0x0, 0x10000007ffffffc) r2 = getuid() lsetxattr$security_capability(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='security.capability\x00', &(0x7f0000000140)=@v3={0x3000000, [{0x0, 0x400}, {0x10000, 0x10000}], r2}, 0x18, 0x3) bind$x25(r1, &(0x7f0000000040)={0x9, @remote={[], 0x0}}, 0x12) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080), 0x4) 13:32:50 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) 13:32:50 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68]}) 13:32:50 executing program 1: mkdir(&(0x7f0000000140)='./file0\x00', 0x0) lsetxattr$security_selinux(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='security.selinux\x00', 0x0, 0x0, 0x0) setxattr$system_posix_acl(&(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='system.posix_acl_default\x00', &(0x7f00000004c0)={{}, {}, [], {}, [{}, {}]}, 0x34, 0x0) mkdir(&(0x7f0000000300)='./file0/file0\x00', 0x0) setxattr$system_posix_acl(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)='system.posix_acl_access\x00', &(0x7f0000000000), 0x24, 0x0) r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x3, 0x408102) bind$nfc_llcp(r0, &(0x7f0000000200)={0x27, 0x1, 0x0, 0x0, 0x3, 0x4, "ca13101c123b097e98a304e8f87f01d2ae6f176cc0ade93c6d93248cc44642055fa8522bdf4dddf83f151d761d2bbc3ccb24556f0a09b84b4c5e95c57e2c0d", 0x3e}, 0x60) chmod(&(0x7f0000000180)='./file0/file0\x00', 0x60) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000340)={0x0, 0x10001}, &(0x7f0000000380)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000003c0)={r1, 0x29}, 0x8) 13:32:50 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x4}, 0x80, 0x0}, 0x0) 13:32:50 executing program 1: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$TIOCSBRK(r0, 0x5427) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, 0x0) 13:32:50 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c]}) 13:32:50 executing program 5: ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f00000000c0)) r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vcs\x00', 0x22200, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffff9c, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x4, 0x30}, &(0x7f0000000280)=0xc) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000002c0)={r1, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xf}}}}, 0x84) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000100), &(0x7f0000000140)=0xc) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000180)) r2 = fcntl$getown(0xffffffffffffffff, 0x9) r3 = syz_open_procfs(r2, &(0x7f00000001c0)='wchan\x00') r4 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) syz_mount_image$nfs4(&(0x7f0000000380)='nfs4\x00', &(0x7f00000003c0)='./file0\x00', 0x5, 0x5, &(0x7f0000001680)=[{&(0x7f0000000400)="0fd96d96d86c8235e08b114eebad012e62e3b32f3848fe893bb49812c486f979b0672bfb8f48d43a2a423c464d68ced12e54e475e49f06e6d0d32414f29646b8d3ae5ac663e325b3f58625763e529359dff9a4445a45ba1370fad5e08705e5636dfcf03a3fe42918a250fcc77762d7aa54850f4da4d9fcdb644c44771a3f4c4c7ae4d4abd289d2931503f64cbee9a677907fa274a267b6729ba04dd4546e2342755bdc639a0414d7fc2a203f74a7acff689a35a8f557e0c4c00d7f0d45e6aa2e4a7ed814077c3dad9d6b8e32ca7aa30ac3d3b145c6", 0xd5}, {&(0x7f0000000500)="f4e1deb92887bfc9e3387ea7e3e09c4aa32df3493c804df0add2aee31942230300622ed75e843da42e404df9e9fab1735a276824f8cc2cb8de9a5571b94f76121ae4c85a4d95b8c238ca495f6e51f6f6e8c66505a749b48e3aac73922d65e8b368f6b82b23b37cfa37473acb6d1c24e0444dee1fd6721ff98172f25b750fca1ca9e6aa7f8952a1f02f7fdbcb06119591d49c84c9b3759675b61d36a465e35907e7e0ec9967710aab8b2ee7cb976cf6d83bf1607fab", 0xb5, 0x3}, {&(0x7f00000005c0)="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", 0x1000, 0x8aba}, {&(0x7f00000015c0)="628e0cb49ff55604b22f6b3a93187674282f645cfd378319eb153b36af0cde53a3380d95e37230b0de999c5cad7d69d9c9c3412143eb220015d8b395bb3572b963ffa04005316efc4ed9ce80ef5a62107d6635e96f80d2c9aaf1", 0x5a, 0x2}, {&(0x7f0000001640)="ae2665776b99dc576b7e6a1e59b81e02a21ee3da7f9af68a94cf34cda2c747a59a6eb57a393849a4344f933b1b59c06e2ad0a4", 0x33, 0x1}], 0x0, &(0x7f0000001700)='md5sum\x00') sendfile(r4, r3, 0x0, 0x10000007ffffffc) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r3, 0x84, 0x16, &(0x7f0000000040)=ANY=[@ANYBLOB="08180000080009000500350e0c00080021020ba0"], &(0x7f0000000080)=0x14) 13:32:50 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 13:32:50 executing program 1 (fault-call:4 fault-nth:0): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:32:50 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, 0x0) [ 2668.223647][T20588] FAULT_INJECTION: forcing a failure. [ 2668.223647][T20588] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.257137][T20588] CPU: 1 PID: 20588 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2668.264774][T20588] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.274826][T20588] Call Trace: [ 2668.278112][T20588] dump_stack+0x172/0x1f0 [ 2668.282437][T20588] should_fail.cold+0xa/0x15 [ 2668.287021][T20588] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2668.292818][T20588] ? ___might_sleep+0x163/0x280 [ 2668.297666][T20588] __should_failslab+0x121/0x190 [ 2668.302590][T20588] should_failslab+0x9/0x14 [ 2668.302605][T20588] kmem_cache_alloc_trace+0x2d1/0x760 [ 2668.302619][T20588] ? ___might_sleep+0x163/0x280 [ 2668.302703][T20588] hci_alloc_dev+0x43/0x1d00 [ 2668.302737][T20588] hci_uart_tty_ioctl+0x2d7/0xb00 [ 2668.312590][T20588] tty_ioctl+0xac9/0x14d0 [ 2668.321921][T20588] ? hci_uart_init_work+0x150/0x150 [ 2668.321939][T20588] ? tty_register_device+0x40/0x40 [ 2668.321952][T20588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2668.321964][T20588] ? tomoyo_init_request_info+0x105/0x1d0 [ 2668.321977][T20588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.321992][T20588] ? tomoyo_path_number_perm+0x263/0x520 [ 2668.322006][T20588] ? find_held_lock+0x35/0x130 13:32:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74]}) 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 2668.331382][T20588] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2668.331406][T20588] ? __fget+0x35a/0x550 [ 2668.331424][T20588] ? tty_register_device+0x40/0x40 [ 2668.331441][T20588] do_vfs_ioctl+0xd6e/0x1390 [ 2668.389789][T20588] ? ioctl_preallocate+0x210/0x210 [ 2668.394886][T20588] ? __fget+0x381/0x550 [ 2668.399032][T20588] ? ksys_dup3+0x3e0/0x3e0 [ 2668.403443][T20588] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2668.409675][T20588] ? fput_many+0x12c/0x1a0 [ 2668.414091][T20588] ? tomoyo_file_ioctl+0x23/0x30 [ 2668.419026][T20588] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.425263][T20588] ? security_file_ioctl+0x93/0xc0 [ 2668.430380][T20588] ksys_ioctl+0xab/0xd0 [ 2668.434538][T20588] __x64_sys_ioctl+0x73/0xb0 [ 2668.439126][T20588] do_syscall_64+0x103/0x610 [ 2668.443709][T20588] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2668.449590][T20588] RIP: 0033:0x457f29 [ 2668.453474][T20588] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) 13:32:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, 0x0) [ 2668.473150][T20588] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2668.481565][T20588] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2668.489530][T20588] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2668.497486][T20588] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2668.497493][T20588] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2668.497500][T20588] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2668.503273][T20588] Bluetooth: Can't allocate HCI device 13:32:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x4000}, 0x80, 0x0}, 0x0) 13:32:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a]}) 13:32:51 executing program 1 (fault-call:4 fault-nth:1): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:32:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) ioctl$SG_SET_COMMAND_Q(r0, 0x2271, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:51 executing program 3 (fault-call:4 fault-nth:0): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2668.707342][T21338] FAULT_INJECTION: forcing a failure. [ 2668.707342][T21338] name failslab, interval 1, probability 0, space 0, times 0 [ 2668.735258][T21338] CPU: 0 PID: 21338 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2668.742887][T21338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2668.752927][T21338] Call Trace: [ 2668.756216][T21338] dump_stack+0x172/0x1f0 [ 2668.760547][T21338] should_fail.cold+0xa/0x15 [ 2668.765136][T21338] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2668.770942][T21338] ? ___might_sleep+0x163/0x280 [ 2668.775793][T21338] __should_failslab+0x121/0x190 [ 2668.780740][T21338] should_failslab+0x9/0x14 [ 2668.785241][T21338] kmem_cache_alloc_trace+0x2d1/0x760 [ 2668.790656][T21338] ? pm_runtime_init+0x311/0x3b0 [ 2668.795606][T21338] ? device_initialize+0x1a1/0x440 [ 2668.795622][T21338] h4_open+0x46/0x160 13:32:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2668.795639][T21338] hci_uart_tty_ioctl+0x709/0xb00 [ 2668.809678][T21338] tty_ioctl+0xac9/0x14d0 [ 2668.813998][T21338] ? hci_uart_init_work+0x150/0x150 [ 2668.819186][T21338] ? tty_register_device+0x40/0x40 [ 2668.824291][T21338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2668.830530][T21338] ? tomoyo_init_request_info+0x105/0x1d0 [ 2668.830544][T21338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2668.830560][T21338] ? tomoyo_path_number_perm+0x263/0x520 [ 2668.842450][T21338] ? find_held_lock+0x35/0x130 [ 2668.842466][T21338] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2668.842494][T21338] ? __fget+0x35a/0x550 [ 2668.842513][T21338] ? tty_register_device+0x40/0x40 [ 2668.867832][T21338] do_vfs_ioctl+0xd6e/0x1390 [ 2668.872410][T21338] ? ioctl_preallocate+0x210/0x210 [ 2668.877507][T21338] ? __fget+0x381/0x550 [ 2668.877525][T21338] ? ksys_dup3+0x3e0/0x3e0 [ 2668.886036][T21338] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2668.886050][T21338] ? fput_many+0x12c/0x1a0 [ 2668.886069][T21338] ? tomoyo_file_ioctl+0x23/0x30 [ 2668.886080][T21338] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:32:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x2, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2668.886098][T21338] ? security_file_ioctl+0x93/0xc0 [ 2668.912889][T21338] ksys_ioctl+0xab/0xd0 [ 2668.917043][T21338] __x64_sys_ioctl+0x73/0xb0 [ 2668.921626][T21338] do_syscall_64+0x103/0x610 [ 2668.926209][T21338] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2668.932084][T21338] RIP: 0033:0x457f29 [ 2668.932099][T21338] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 13:32:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000040)) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:32:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300]}) [ 2668.932106][T21338] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2668.932120][T21338] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2668.932128][T21338] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2668.932136][T21338] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2668.932150][T21338] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2668.955589][T21338] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:32:51 executing program 1 (fault-call:4 fault-nth:2): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:32:51 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x5421, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:51 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x40000}, 0x80, 0x0}, 0x0) 13:32:51 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500]}) 13:32:51 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) mkdir(&(0x7f0000000040)='./file0\x00', 0x2) [ 2669.179418][T21844] FAULT_INJECTION: forcing a failure. [ 2669.179418][T21844] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.206870][T21844] CPU: 1 PID: 21844 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2669.214601][T21844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.224635][T21844] Call Trace: [ 2669.224669][T21844] dump_stack+0x172/0x1f0 [ 2669.224688][T21844] should_fail.cold+0xa/0x15 [ 2669.236816][T21844] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2669.242632][T21844] ? ___might_sleep+0x163/0x280 [ 2669.247487][T21844] __should_failslab+0x121/0x190 [ 2669.252419][T21844] should_failslab+0x9/0x14 [ 2669.256919][T21844] kmem_cache_alloc_trace+0x2d1/0x760 [ 2669.262276][T21844] ? pm_runtime_init+0x311/0x3b0 [ 2669.262291][T21844] ? device_initialize+0x1a1/0x440 [ 2669.262309][T21844] h4_open+0x46/0x160 [ 2669.262324][T21844] hci_uart_tty_ioctl+0x709/0xb00 [ 2669.262339][T21844] tty_ioctl+0xac9/0x14d0 [ 2669.262354][T21844] ? hci_uart_init_work+0x150/0x150 [ 2669.290780][T21844] ? tty_register_device+0x40/0x40 [ 2669.295884][T21844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2669.302114][T21844] ? tomoyo_init_request_info+0x105/0x1d0 [ 2669.307828][T21844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.314062][T21844] ? tomoyo_path_number_perm+0x263/0x520 [ 2669.319691][T21844] ? find_held_lock+0x35/0x130 [ 2669.324458][T21844] ? tomoyo_execute_permission+0x4a0/0x4a0 13:32:51 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 13:32:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x140000) [ 2669.330267][T21844] ? __fget+0x35a/0x550 [ 2669.334420][T21844] ? tty_register_device+0x40/0x40 [ 2669.339533][T21844] do_vfs_ioctl+0xd6e/0x1390 [ 2669.344117][T21844] ? ioctl_preallocate+0x210/0x210 [ 2669.349240][T21844] ? __fget+0x381/0x550 [ 2669.353392][T21844] ? ksys_dup3+0x3e0/0x3e0 [ 2669.353406][T21844] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2669.353419][T21844] ? fput_many+0x12c/0x1a0 [ 2669.353445][T21844] ? tomoyo_file_ioctl+0x23/0x30 [ 2669.353457][T21844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.353470][T21844] ? security_file_ioctl+0x93/0xc0 [ 2669.353486][T21844] ksys_ioctl+0xab/0xd0 [ 2669.353501][T21844] __x64_sys_ioctl+0x73/0xb0 [ 2669.353522][T21844] do_syscall_64+0x103/0x610 [ 2669.364131][T21844] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2669.364141][T21844] RIP: 0033:0x457f29 [ 2669.364154][T21844] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:32:52 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x1}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f00000000c0)={r1, 0x8, 0x800}, &(0x7f0000000100)=0x8) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x8) [ 2669.364160][T21844] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2669.364173][T21844] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2669.364179][T21844] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2669.364192][T21844] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2669.398073][T21844] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2669.398082][T21844] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:32:52 executing program 1 (fault-call:4 fault-nth:3): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) [ 2669.398311][ C1] net_ratelimit: 7 callbacks suppressed [ 2669.398318][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2669.443960][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2669.444035][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2669.475949][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2669.476077][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2669.476114][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:32:52 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600]}) [ 2669.578242][T22406] FAULT_INJECTION: forcing a failure. [ 2669.578242][T22406] name failslab, interval 1, probability 0, space 0, times 0 [ 2669.600329][T22406] CPU: 1 PID: 22406 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2669.607959][T22406] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2669.618017][T22406] Call Trace: [ 2669.621300][T22406] dump_stack+0x172/0x1f0 13:32:52 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) [ 2669.625628][T22406] should_fail.cold+0xa/0x15 [ 2669.630224][T22406] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2669.636032][T22406] ? ___might_sleep+0x163/0x280 [ 2669.640883][T22406] __should_failslab+0x121/0x190 [ 2669.645804][T22406] should_failslab+0x9/0x14 [ 2669.650285][T22406] __kmalloc+0x2dc/0x740 [ 2669.650305][T22406] ? alloc_workqueue+0x13c/0xe70 [ 2669.650322][T22406] alloc_workqueue+0x13c/0xe70 [ 2669.664195][T22406] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2669.664210][T22406] ? scnprintf+0x140/0x140 [ 2669.664231][T22406] ? kmem_cache_alloc_trace+0x354/0x760 [ 2669.674319][T22406] hci_register_dev+0x1b8/0x860 [ 2669.674333][T22406] ? __raw_spin_lock_init+0x2d/0x100 [ 2669.674352][T22406] hci_uart_tty_ioctl+0x766/0xb00 [ 2669.674368][T22406] tty_ioctl+0xac9/0x14d0 [ 2669.674383][T22406] ? hci_uart_init_work+0x150/0x150 [ 2669.684717][T22406] ? tty_register_device+0x40/0x40 [ 2669.684731][T22406] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2669.684755][T22406] ? tomoyo_init_request_info+0x105/0x1d0 [ 2669.684769][T22406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:32:52 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700]}) [ 2669.684782][T22406] ? tomoyo_path_number_perm+0x263/0x520 [ 2669.684799][T22406] ? find_held_lock+0x35/0x130 [ 2669.684814][T22406] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2669.743911][T22406] ? __fget+0x35a/0x550 [ 2669.748077][T22406] ? tty_register_device+0x40/0x40 [ 2669.753189][T22406] do_vfs_ioctl+0xd6e/0x1390 [ 2669.757780][T22406] ? ioctl_preallocate+0x210/0x210 [ 2669.762888][T22406] ? __fget+0x381/0x550 [ 2669.767042][T22406] ? ksys_dup3+0x3e0/0x3e0 [ 2669.771458][T22406] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 13:32:52 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) [ 2669.777698][T22406] ? fput_many+0x12c/0x1a0 [ 2669.782112][T22406] ? tomoyo_file_ioctl+0x23/0x30 [ 2669.782126][T22406] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2669.782138][T22406] ? security_file_ioctl+0x93/0xc0 [ 2669.782153][T22406] ksys_ioctl+0xab/0xd0 [ 2669.793287][T22406] __x64_sys_ioctl+0x73/0xb0 [ 2669.793304][T22406] do_syscall_64+0x103/0x610 [ 2669.793323][T22406] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2669.817523][T22406] RIP: 0033:0x457f29 [ 2669.821418][T22406] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2669.841006][T22406] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2669.841019][T22406] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2669.841026][T22406] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2669.841033][T22406] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 13:32:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x5450, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2669.841040][T22406] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2669.841047][T22406] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2669.849558][ C0] protocol 88fb is buggy, dev hsr_slave_0 [ 2669.849596][ C0] protocol 88fb is buggy, dev hsr_slave_1 [ 2669.889891][T22406] Bluetooth: Can't register HCI device 13:32:52 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x1000000}, 0x80, 0x0}, 0x0) 13:32:52 executing program 5: getpid() r0 = getpgid(0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='pagemap\x00') r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r1, 0x0, 0x10000007ffffffc) 13:32:52 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800]}) 13:32:52 executing program 1 (fault-call:4 fault-nth:4): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:32:52 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x5451, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:52 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) [ 2670.086407][T22921] FAULT_INJECTION: forcing a failure. [ 2670.086407][T22921] name failslab, interval 1, probability 0, space 0, times 0 [ 2670.111870][T22921] CPU: 0 PID: 22921 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2670.119507][T22921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2670.129550][T22921] Call Trace: [ 2670.132879][T22921] dump_stack+0x172/0x1f0 [ 2670.137218][T22921] should_fail.cold+0xa/0x15 [ 2670.141806][T22921] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2670.141829][T22921] ? ___might_sleep+0x163/0x280 [ 2670.141849][T22921] __should_failslab+0x121/0x190 [ 2670.141869][T22921] should_failslab+0x9/0x14 [ 2670.152479][T22921] kmem_cache_alloc_trace+0x2d1/0x760 [ 2670.152494][T22921] ? rcu_read_lock_sched_held+0x110/0x130 [ 2670.152506][T22921] ? __kmalloc+0x5d5/0x740 [ 2670.152526][T22921] alloc_workqueue_attrs+0x82/0x120 [ 2670.152543][T22921] alloc_workqueue+0x166/0xe70 [ 2670.152562][T22921] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2670.193019][T22921] ? scnprintf+0x140/0x140 [ 2670.197431][T22921] ? kmem_cache_alloc_trace+0x354/0x760 [ 2670.202986][T22921] hci_register_dev+0x1b8/0x860 [ 2670.207829][T22921] ? __raw_spin_lock_init+0x2d/0x100 [ 2670.213115][T22921] hci_uart_tty_ioctl+0x766/0xb00 [ 2670.218142][T22921] tty_ioctl+0xac9/0x14d0 [ 2670.222480][T22921] ? hci_uart_init_work+0x150/0x150 [ 2670.227676][T22921] ? tty_register_device+0x40/0x40 [ 2670.232782][T22921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2670.239013][T22921] ? tomoyo_init_request_info+0x105/0x1d0 [ 2670.239042][T22921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.239060][T22921] ? tomoyo_path_number_perm+0x263/0x520 [ 2670.250961][T22921] ? find_held_lock+0x35/0x130 [ 2670.250978][T22921] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2670.251000][T22921] ? __fget+0x35a/0x550 [ 2670.261347][T22921] ? tty_register_device+0x40/0x40 [ 2670.261376][T22921] do_vfs_ioctl+0xd6e/0x1390 [ 2670.271284][T22921] ? ioctl_preallocate+0x210/0x210 [ 2670.271296][T22921] ? __fget+0x381/0x550 [ 2670.271314][T22921] ? ksys_dup3+0x3e0/0x3e0 [ 2670.294557][T22921] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2670.294573][T22921] ? fput_many+0x12c/0x1a0 [ 2670.294593][T22921] ? tomoyo_file_ioctl+0x23/0x30 [ 2670.305182][T22921] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.305197][T22921] ? security_file_ioctl+0x93/0xc0 [ 2670.305212][T22921] ksys_ioctl+0xab/0xd0 [ 2670.305227][T22921] __x64_sys_ioctl+0x73/0xb0 [ 2670.305262][T22921] do_syscall_64+0x103/0x610 [ 2670.334712][T22921] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2670.340569][T22921] RIP: 0033:0x457f29 [ 2670.344432][T22921] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2670.364008][T22921] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2670.372406][T22921] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:32:53 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) 13:32:53 executing program 5: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000800)) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000940)=0x0) r1 = syz_open_procfs(r0, &(0x7f00000001c0)='net/psched\x00') r2 = syz_open_dev$usbmon(&(0x7f0000000080)='/dev/usbmon#\x00', 0x3f, 0x1) ioctl$DRM_IOCTL_WAIT_VBLANK(r1, 0xc018643a, &(0x7f0000000040)={0x8000000, 0x4e, 0x2a}) syz_mount_image$ceph(&(0x7f00000000c0)='ceph\x00', &(0x7f0000000100)='./file0\x00', 0xffffffffffff63bb, 0x8, &(0x7f0000000600)=[{&(0x7f0000000200)="8e72a57abd1f20e366c73a91536143a9c9ba9b77a85a3ac2f35d21e2127559cd31acaed2e427920a5f75ca21a4153322a88a6c3bc05c987a908ee0cbc23874b0f668bc92aa6456e6b13b3913d6227a9c56b37050f7df70b0eb5d54389c3c73ff2def1672eb3b5fbae52bc7937e24d39186cd7c8aa3b8407d0161b0ee131760092c6b2fdbe338f5e83b024afa3e2775347e2e059f7168a0d11f2f9af2ca70d9b84a98b38c9abde91672d02ca17c4921c49ac35915467dae27d3e8bbfc6049a3fd49e2263178665ce2f41c1d2d8e5dafe25296bf140824915d2cd298c3d49e6a9816cdc84c2c520f13636135f2c0c86c04935cd5d6a22505c7c4a3c5", 0xfb, 0x7ff}, {&(0x7f0000000140)="4917f19842372c057915bd0b496740266917823060cdfc2300d4330c54ba430d8733bd4df5a184865a7d0f36259d2a19f03ddfb10d0293aefc23b0", 0x3b, 0x1}, {&(0x7f0000000300)="23df202afc9546fc71be552bb850cec6be1755dc0bdee8e7b7a18859ab1cbb6f0a8232c395102c63ec59b4c01e1c73e14af095727a841ac039dcdc04b614f786dc1ea7fe69398d29ca2a28b67afbc33f2c444dc97fa9458e2299bf978767514916ff0a", 0x63, 0x5}, {&(0x7f0000000180)="feb18494032f80cd2ef38785926db0a8fad9ef35fdb47f2621a2780675ce087730ea309f41f4688f60d320956011ddaaec4f97e90b8b94427fdfd708006a", 0x3e, 0xffffffff}, {&(0x7f0000000380)="cec86f2dd7c51bebc06900ede084923d74229fc42e4dec1375ef8c18b42dd1a97fa9bb26955e57b5245f23db4d41521b2665c7a5630a80feeb996937883e47f3e675527edac3ae33d26f9e92d2b5de39bf357ddc26b7cdfda57c52ca3b20e7425b6ce59ee0e455f7ff30faa57570eea925de8f6d5f3f2b90805b23d15476f631fde053a6a88686311e056392024406ecaa6660941e9a4ee2e166493f777190006cac88ca2c7202d9c192e548255f1926de7f86dd55ccc02b784c30e77e46c2f9025d5fe3e0bd561a762d14246fd062ea65f9f68605a966ff3676776393ed3d318188d2908c1e", 0xe6, 0x6}, {&(0x7f0000000480)="d837dda492abce5fbdd6455bd8f2ef0852ab5cb4", 0x14, 0xffff}, {&(0x7f00000004c0)="36a6afe215cb599ef411a921e7df8583c315345e32b9105ddd9c2578f1ea5d5816bd901b89b39e9cc7e9b5f20d3a08ba1e37e472d2af48f9fd8b7901751815b861b564da4e5a5648ab443ea230b2c72f447534f8bba5fd63fa0ff9a5e39deb72828e14521180859399ea18f6a160416770200f8cf31f0af2dbb36e337338e43a9e3158873343279f64da002695bc56bc2f7d834023b7f9acf90e90424b778f1ec0ea48da946f2197a81d1028e3c02eec4a3616eb1d317b", 0xb7, 0x9}, {&(0x7f0000000580)="b3d2f84ca3ed50452cc5f3700f43a9b0cf374b3197501a537fd8737aa0c5e242db3b2c8b5b19c95cd97ff20c1eb5e9ff00ea5d5b8953057c2a6d115513eddf6f05f26059415168ab675fb49ab5bdc21820823bcaa9df62e2fa4c267aa317d190da", 0x61, 0x55}], 0x3, &(0x7f00000006c0)='pagemap\x00') openat$snapshot(0xffffffffffffff9c, &(0x7f0000000700)='/dev/snapshot\x00', 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r3 = openat$smack_task_current(0xffffffffffffff9c, &(0x7f00000007c0)='/proc/self/attr/current\x00', 0x2, 0x0) sendfile(r3, r2, 0x0, 0x8181) set_thread_area(&(0x7f0000000740)={0xc0000000000000, 0x0, 0x0, 0xfb0, 0x8001, 0x10000, 0x101, 0x0, 0x8, 0x7}) 13:32:53 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00]}) 13:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x5452, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2670.380362][T22921] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2670.388305][T22921] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2670.396250][T22921] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2670.404191][T22921] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2670.417894][T22921] Bluetooth: Can't register HCI device 13:32:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x2000000}, 0x80, 0x0}, 0x0) 13:32:53 executing program 1 (fault-call:4 fault-nth:5): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) [ 2670.445570][T23233] ceph: device name is missing path (no : separator in /dev/loop5) 13:32:53 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) 13:32:53 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800]}) [ 2670.594397][T23549] FAULT_INJECTION: forcing a failure. [ 2670.594397][T23549] name failslab, interval 1, probability 0, space 0, times 0 13:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x5460, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2670.665650][T23549] CPU: 1 PID: 23549 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2670.673298][T23549] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2670.683358][T23549] Call Trace: [ 2670.686648][T23549] dump_stack+0x172/0x1f0 [ 2670.690989][T23549] should_fail.cold+0xa/0x15 [ 2670.695690][T23549] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2670.695710][T23549] ? ___might_sleep+0x163/0x280 [ 2670.695730][T23549] __should_failslab+0x121/0x190 [ 2670.706342][T23549] should_failslab+0x9/0x14 [ 2670.706357][T23549] __kmalloc_track_caller+0x2d8/0x740 [ 2670.706371][T23549] ? pointer+0x910/0x910 [ 2670.706382][T23549] ? set_precision+0x180/0x180 [ 2670.706398][T23549] ? fs_reclaim_acquire.part.0+0x30/0x30 [ 2670.725345][T23549] ? kasprintf+0xbb/0xf0 [ 2670.725360][T23549] kvasprintf+0xc8/0x170 [ 2670.725376][T23549] ? bust_spinlocks+0xe0/0xe0 [ 2670.735734][T23549] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 2670.735763][T23549] ? find_next_bit+0x107/0x130 [ 2670.735780][T23549] kasprintf+0xbb/0xf0 13:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xae03, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2670.735795][T23549] ? kvasprintf_const+0x190/0x190 [ 2670.744230][T23549] ? kasan_check_read+0x11/0x20 [ 2670.744251][T23549] alloc_workqueue+0x442/0xe70 [ 2670.744271][T23549] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2670.754618][T23549] ? kmem_cache_alloc_trace+0x354/0x760 [ 2670.754636][T23549] hci_register_dev+0x1b8/0x860 [ 2670.754653][T23549] ? __raw_spin_lock_init+0x2d/0x100 [ 2670.773237][T23549] hci_uart_tty_ioctl+0x766/0xb00 [ 2670.773259][T23549] tty_ioctl+0xac9/0x14d0 [ 2670.783673][T23549] ? hci_uart_init_work+0x150/0x150 [ 2670.783688][T23549] ? tty_register_device+0x40/0x40 [ 2670.783701][T23549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2670.783717][T23549] ? tomoyo_init_request_info+0x105/0x1d0 [ 2670.830776][T23549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.830791][T23549] ? tomoyo_path_number_perm+0x263/0x520 [ 2670.830807][T23549] ? find_held_lock+0x35/0x130 [ 2670.842620][T23549] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2670.842644][T23549] ? __fget+0x35a/0x550 [ 2670.842667][T23549] ? tty_register_device+0x40/0x40 [ 2670.862396][T23549] do_vfs_ioctl+0xd6e/0x1390 [ 2670.866994][T23549] ? ioctl_preallocate+0x210/0x210 [ 2670.867012][T23549] ? __fget+0x381/0x550 [ 2670.876242][T23549] ? ksys_dup3+0x3e0/0x3e0 [ 2670.876254][T23549] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2670.876270][T23549] ? fput_many+0x12c/0x1a0 [ 2670.886882][T23549] ? tomoyo_file_ioctl+0x23/0x30 [ 2670.886896][T23549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2670.886909][T23549] ? security_file_ioctl+0x93/0xc0 [ 2670.886924][T23549] ksys_ioctl+0xab/0xd0 [ 2670.896235][T23549] __x64_sys_ioctl+0x73/0xb0 13:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xae41, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2670.896255][T23549] do_syscall_64+0x103/0x610 [ 2670.916220][T23549] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2670.916230][T23549] RIP: 0033:0x457f29 [ 2670.916245][T23549] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2670.926652][T23549] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2670.926665][T23549] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:32:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') openat$cuse(0xffffffffffffff9c, &(0x7f0000000280)='/dev/cuse\x00', 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000000180)=""/148, 0x94}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='statm\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000241, 0x0) sendfile(r0, r0, 0x0, 0x1000000fffffffd) fadvise64(r0, 0x14, 0x31f, 0x6) [ 2670.926672][T23549] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2670.926679][T23549] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2670.926686][T23549] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2670.926697][T23549] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:32:53 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x40049409, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:32:53 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) 13:32:53 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00]}) 13:32:53 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x40000000}, 0x80, 0x0}, 0x0) 13:32:53 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='\x00}&\x00\x00\x00\x00\x00\x00\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) r2 = fcntl$getown(r1, 0x9) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x8, 0x800) syz_open_procfs(r2, &(0x7f0000000080)='net/ip6_flowlabel\x00') openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer2\x00', 0x2100, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)) ioctl$EVIOCGKEY(r0, 0x80404518, &(0x7f0000000140)=""/228) [ 2671.221810][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2671.227592][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2673.061819][T28529] Bluetooth: hci0: command 0x1003 tx timeout [ 2673.067901][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2675.141804][ T9111] Bluetooth: hci0: command 0x1001 tx timeout [ 2675.147997][ T1406] Bluetooth: hci0: sending frame failed (-49) [ 2677.222024][T28529] Bluetooth: hci0: command 0x1009 tx timeout 13:33:04 executing program 1 (fault-call:4 fault-nth:6): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae61, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:04 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) 13:33:04 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400]}) 13:33:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='schedstat\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x2, 0x0) openat$snapshot(0xffffffffffffff9c, &(0x7f0000000140)='/dev/snapshot\x00', 0x8382, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r0, 0x4048ae9b, &(0x7f00000000c0)={0xa0000, 0x0, [0x7, 0x201, 0x9, 0x4f35b84f, 0x80000000000000, 0x4, 0x7, 0x8001]}) sendfile(r1, r0, 0x0, 0x10000007ffffffc) 13:33:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0xeffdffff}, 0x80, 0x0}, 0x0) [ 2681.550444][T24423] FAULT_INJECTION: forcing a failure. [ 2681.550444][T24423] name failslab, interval 1, probability 0, space 0, times 0 13:33:04 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a00]}) [ 2681.612210][T24423] CPU: 0 PID: 24423 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2681.619976][T24423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2681.621786][ C1] net_ratelimit: 2 callbacks suppressed [ 2681.621793][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.630013][T24423] Call Trace: [ 2681.635693][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.641297][T24423] dump_stack+0x172/0x1f0 [ 2681.644637][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:33:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4008ae6a, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='pagemap\x00') r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r1, r0, 0x0, 0x10000007ffffffc) fsetxattr$security_smack_transmute(r0, &(0x7f0000000040)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000080)='TRUE', 0x4, 0x3) syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x7e, 0x2000) [ 2681.650243][T24423] should_fail.cold+0xa/0x15 [ 2681.654583][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.660229][T24423] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2681.676263][T24423] ? ___might_sleep+0x163/0x280 [ 2681.681114][T24423] __should_failslab+0x121/0x190 [ 2681.686056][T24423] should_failslab+0x9/0x14 [ 2681.690569][T24423] __kmalloc+0x2dc/0x740 [ 2681.694812][T24423] ? apply_wqattrs_prepare+0xae/0x970 [ 2681.700207][T24423] apply_wqattrs_prepare+0xae/0x970 [ 2681.705429][T24423] apply_workqueue_attrs_locked+0xcb/0x140 [ 2681.711251][T24423] apply_workqueue_attrs+0x31/0x50 [ 2681.711269][T24423] alloc_workqueue+0x84c/0xe70 [ 2681.711291][T24423] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2681.711313][T24423] ? kmem_cache_alloc_trace+0x354/0x760 [ 2681.732372][T24423] hci_register_dev+0x1b8/0x860 [ 2681.732388][T24423] ? __raw_spin_lock_init+0x2d/0x100 [ 2681.732415][T24423] hci_uart_tty_ioctl+0x766/0xb00 [ 2681.732435][T24423] tty_ioctl+0xac9/0x14d0 [ 2681.732448][T24423] ? hci_uart_init_work+0x150/0x150 [ 2681.732461][T24423] ? tty_register_device+0x40/0x40 [ 2681.732472][T24423] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2681.732489][T24423] ? tomoyo_init_request_info+0x105/0x1d0 [ 2681.774104][T24423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2681.780338][T24423] ? tomoyo_path_number_perm+0x263/0x520 [ 2681.785967][T24423] ? find_held_lock+0x35/0x130 [ 2681.790731][T24423] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2681.790757][T24423] ? __fget+0x35a/0x550 [ 2681.790780][T24423] ? tty_register_device+0x40/0x40 [ 2681.805788][T24423] do_vfs_ioctl+0xd6e/0x1390 13:33:04 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) [ 2681.810380][T24423] ? ioctl_preallocate+0x210/0x210 [ 2681.815496][T24423] ? __fget+0x381/0x550 [ 2681.819658][T24423] ? ksys_dup3+0x3e0/0x3e0 [ 2681.824080][T24423] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2681.830309][T24423] ? fput_many+0x12c/0x1a0 [ 2681.834718][T24423] ? tomoyo_file_ioctl+0x23/0x30 [ 2681.834732][T24423] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2681.834744][T24423] ? security_file_ioctl+0x93/0xc0 [ 2681.834760][T24423] ksys_ioctl+0xab/0xd0 [ 2681.855142][T24423] __x64_sys_ioctl+0x73/0xb0 [ 2681.859724][T24423] do_syscall_64+0x103/0x610 [ 2681.861800][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.864307][T24423] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2681.864319][T24423] RIP: 0033:0x457f29 [ 2681.864333][T24423] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2681.864340][T24423] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2681.870070][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:33:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') execve(&(0x7f0000000000)='./file0\x00', &(0x7f0000000180)=[&(0x7f00000000c0)='pagemap\x00', &(0x7f0000000100)='eth1nodevproc\x00', &(0x7f0000000140)='pagemap\x00'], &(0x7f0000000340)=[&(0x7f0000000200)='ppp0\x00', &(0x7f0000000240)='pagemap\x00', &(0x7f0000000280)='pagemap\x00', &(0x7f00000002c0)='ppp1procmime_type+@vmnet1\x00', &(0x7f0000000300)='&\x00']) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x800) ioctl$VIDIOC_G_TUNER(r0, 0xc054561d, &(0x7f0000000040)={0x7, "878437982174fc8066aac67b3c89ef2c56e3d2b67fc428357b9a60563db5d18a", 0x0, 0x110, 0x1, 0x7, 0x7, 0x3, 0x1, 0x9743}) ioctl$SIOCX25CALLACCPTAPPRV(r0, 0x89e8) syz_open_dev$swradio(&(0x7f00000003c0)='/dev/swradio#\x00', 0x1, 0x2) [ 2681.875902][T24423] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2681.875910][T24423] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2681.875918][T24423] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2681.875924][T24423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2681.875935][T24423] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2681.941780][ C1] protocol 88fb is buggy, dev hsr_slave_0 13:33:04 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000]}) [ 2681.959337][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2681.965204][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2681.970936][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2682.115728][T24423] Bluetooth: Can't register HCI device 13:33:04 executing program 1 (fault-call:4 fault-nth:7): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:04 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) 13:33:04 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae42, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:04 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x200000000000013, &(0x7f0000000280)=0x400100000001, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000040), &(0x7f0000000200)=0x14) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x2, 0x0) sendfile(r2, r0, 0x0, 0x10000007ffffffc) 13:33:04 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0xfffffdef}, 0x80, 0x0}, 0x0) 13:33:04 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000]}) [ 2682.278037][T25475] FAULT_INJECTION: forcing a failure. [ 2682.278037][T25475] name failslab, interval 1, probability 0, space 0, times 0 [ 2682.297426][T25475] CPU: 0 PID: 25475 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2682.305784][T25475] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2682.315826][T25475] Call Trace: [ 2682.319119][T25475] dump_stack+0x172/0x1f0 [ 2682.323478][T25475] should_fail.cold+0xa/0x15 13:33:05 executing program 5: setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x3, 0x0, 0x5, 0x0, 0x1, 0x0, 'syz0\x00', &(0x7f0000000000)=['Leth1\x81-)\x00'], 0x9}) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 13:33:05 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000]}) [ 2682.328088][T25475] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2682.333893][T25475] ? ___might_sleep+0x163/0x280 [ 2682.338746][T25475] __should_failslab+0x121/0x190 [ 2682.343690][T25475] should_failslab+0x9/0x14 [ 2682.348209][T25475] kmem_cache_alloc_trace+0x2d1/0x760 [ 2682.353599][T25475] ? rcu_read_lock_sched_held+0x110/0x130 [ 2682.359321][T25475] ? __kmalloc+0x5d5/0x740 [ 2682.363748][T25475] alloc_workqueue_attrs+0x82/0x120 [ 2682.368956][T25475] apply_wqattrs_prepare+0xbb/0x970 [ 2682.374180][T25475] apply_workqueue_attrs_locked+0xcb/0x140 [ 2682.380000][T25475] apply_workqueue_attrs+0x31/0x50 [ 2682.385113][T25475] alloc_workqueue+0x84c/0xe70 [ 2682.389902][T25475] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2682.395636][T25475] ? kmem_cache_alloc_trace+0x354/0x760 [ 2682.401179][T25475] hci_register_dev+0x1b8/0x860 [ 2682.401196][T25475] ? __raw_spin_lock_init+0x2d/0x100 [ 2682.401217][T25475] hci_uart_tty_ioctl+0x766/0xb00 [ 2682.401237][T25475] tty_ioctl+0xac9/0x14d0 [ 2682.411345][T25475] ? hci_uart_init_work+0x150/0x150 [ 2682.411369][T25475] ? tty_register_device+0x40/0x40 [ 2682.411384][T25475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2682.411398][T25475] ? tomoyo_init_request_info+0x105/0x1d0 [ 2682.411412][T25475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2682.411432][T25475] ? tomoyo_path_number_perm+0x263/0x520 [ 2682.420744][T25475] ? find_held_lock+0x35/0x130 [ 2682.420761][T25475] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2682.420785][T25475] ? __fget+0x35a/0x550 [ 2682.420803][T25475] ? tty_register_device+0x40/0x40 13:33:05 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000]}) 13:33:05 executing program 5: [ 2682.420819][T25475] do_vfs_ioctl+0xd6e/0x1390 [ 2682.431072][T25475] ? ioctl_preallocate+0x210/0x210 [ 2682.431087][T25475] ? __fget+0x381/0x550 [ 2682.431106][T25475] ? ksys_dup3+0x3e0/0x3e0 [ 2682.431120][T25475] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2682.431132][T25475] ? fput_many+0x12c/0x1a0 [ 2682.431151][T25475] ? tomoyo_file_ioctl+0x23/0x30 [ 2682.508407][T25475] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2682.514657][T25475] ? security_file_ioctl+0x93/0xc0 [ 2682.519781][T25475] ksys_ioctl+0xab/0xd0 [ 2682.523952][T25475] __x64_sys_ioctl+0x73/0xb0 [ 2682.528546][T25475] do_syscall_64+0x103/0x610 [ 2682.533141][T25475] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2682.539043][T25475] RIP: 0033:0x457f29 [ 2682.542940][T25475] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2682.562534][T25475] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2682.570940][T25475] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:33:05 executing program 5: 13:33:05 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000]}) [ 2682.578920][T25475] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2682.586893][T25475] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2682.594865][T25475] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2682.602837][T25475] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:33:05 executing program 1 (fault-call:4 fault-nth:8): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:05 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) 13:33:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae67, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:05 executing program 5: [ 2682.657066][T25475] Bluetooth: Can't register HCI device 13:33:05 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0xffffff7f}, 0x80, 0x0}, 0x0) 13:33:05 executing program 5: 13:33:05 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000]}) [ 2682.794028][T26231] FAULT_INJECTION: forcing a failure. [ 2682.794028][T26231] name failslab, interval 1, probability 0, space 0, times 0 [ 2682.822973][T26231] CPU: 0 PID: 26231 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2682.830626][T26231] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2682.840666][T26231] Call Trace: 13:33:05 executing program 5: [ 2682.840691][T26231] dump_stack+0x172/0x1f0 [ 2682.840716][T26231] should_fail.cold+0xa/0x15 [ 2682.852867][T26231] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2682.858688][T26231] ? ___might_sleep+0x163/0x280 [ 2682.863536][T26231] __should_failslab+0x121/0x190 [ 2682.868469][T26231] should_failslab+0x9/0x14 [ 2682.868487][T26231] kmem_cache_alloc_trace+0x2d1/0x760 [ 2682.868503][T26231] ? rcu_read_lock_sched_held+0x110/0x130 [ 2682.868519][T26231] ? __kmalloc+0x5d5/0x740 [ 2682.888647][T26231] alloc_workqueue_attrs+0x82/0x120 13:33:05 executing program 5: [ 2682.893852][T26231] apply_wqattrs_prepare+0xc8/0x970 [ 2682.899068][T26231] apply_workqueue_attrs_locked+0xcb/0x140 [ 2682.904886][T26231] apply_workqueue_attrs+0x31/0x50 [ 2682.909993][T26231] alloc_workqueue+0x84c/0xe70 [ 2682.914760][T26231] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2682.920503][T26231] ? kmem_cache_alloc_trace+0x354/0x760 [ 2682.926055][T26231] hci_register_dev+0x1b8/0x860 [ 2682.930903][T26231] ? __raw_spin_lock_init+0x2d/0x100 [ 2682.936183][T26231] hci_uart_tty_ioctl+0x766/0xb00 13:33:05 executing program 5: socket$inet_tcp(0x2, 0x1, 0x0) setsockopt(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000001000), 0xc5) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000100)='t\bnu\x00\x00\x00\x00\x00\x00\x00\x00\x00\x8c\x00', 0x0) readlink(&(0x7f0000000240)='./file0\x00', &(0x7f00000003c0)=""/38, 0x26) pwritev(r0, 0x0, 0x0, 0xfffffffffffffffa) ioctl$RTC_EPOCH_READ(0xffffffffffffffff, 0x8008700d, &(0x7f0000000180)) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$inet(0x2, 0x6000000000000003, 0x6) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='sit0\x00', 0x8b) sendto$inet(r2, &(0x7f00000003c0), 0x0, 0x404c0c0, 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000380)={0x0, 0x0, 0x2ffd}, 0x4) sendto$inet(r2, &(0x7f0000000080), 0x0, 0x0, 0x0, 0x0) [ 2682.936206][T26231] tty_ioctl+0xac9/0x14d0 [ 2682.936221][T26231] ? hci_uart_init_work+0x150/0x150 [ 2682.936235][T26231] ? tty_register_device+0x40/0x40 [ 2682.936250][T26231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2682.936265][T26231] ? tomoyo_init_request_info+0x105/0x1d0 [ 2682.936281][T26231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2682.974052][T26231] ? tomoyo_path_number_perm+0x263/0x520 [ 2682.979686][T26231] ? find_held_lock+0x35/0x130 [ 2682.984458][T26231] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2682.990276][T26231] ? __fget+0x35a/0x550 13:33:05 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) [ 2682.994453][T26231] ? tty_register_device+0x40/0x40 [ 2682.999570][T26231] do_vfs_ioctl+0xd6e/0x1390 [ 2683.004169][T26231] ? ioctl_preallocate+0x210/0x210 [ 2683.009275][T26231] ? __fget+0x381/0x550 [ 2683.013450][T26231] ? ksys_dup3+0x3e0/0x3e0 [ 2683.017878][T26231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2683.026822][T26231] ? fput_many+0x12c/0x1a0 [ 2683.031241][T26231] ? tomoyo_file_ioctl+0x23/0x30 [ 2683.031256][T26231] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 13:33:05 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4010ae68, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2683.031284][T26231] ? security_file_ioctl+0x93/0xc0 [ 2683.047564][T26231] ksys_ioctl+0xab/0xd0 [ 2683.051722][T26231] __x64_sys_ioctl+0x73/0xb0 [ 2683.056327][T26231] do_syscall_64+0x103/0x610 [ 2683.056350][T26231] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2683.056362][T26231] RIP: 0033:0x457f29 [ 2683.056376][T26231] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2683.056389][T26231] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2683.090885][T26231] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2683.090895][T26231] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2683.090904][T26231] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2683.090913][T26231] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2683.090921][T26231] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2683.185830][T26231] Bluetooth: Can't register HCI device 13:33:06 executing program 1 (fault-call:4 fault-nth:9): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:06 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000]}) 13:33:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x4000000000000}, 0x80, 0x0}, 0x0) 13:33:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020940d, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:06 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x41, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x89a1, &(0x7f00000000c0)={@local={0xfe, 0x80, [0x600, 0x3ef, 0x0, 0x3f00000000000000, 0x100000000000000, 0x0, 0x1103, 0x0, 0x0, 0x0, 0x0, 0x6]}}) ioctl$sock_inet6_SIOCADDRT(r1, 0x89a0, &(0x7f0000000100)={@local={0xfe, 0x80, [0x0, 0xfeff0000]}, @empty, @loopback}) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f00000001c0)={0x7e, 0x0, 0x10001}) ioctl$UI_DEV_DESTROY(0xffffffffffffffff, 0x5502) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, 0x0) r3 = openat$full(0xffffffffffffff9c, &(0x7f0000001a00)='/dev/full\x00', 0x0, 0x0) getpeername$packet(0xffffffffffffff9c, 0x0, &(0x7f0000000300)) getpeername$packet(0xffffffffffffff9c, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000380)=0x3c1) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, &(0x7f0000000040)=0x7, 0x4) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffff9c, 0xc0106434, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x5}) open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x10811, r0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000540)=0xc) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) getgid() syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001b00)={{{@in=@remote, @in=@loopback}}, {{@in=@empty}, 0x0, @in6=@loopback}}, &(0x7f0000001c00)=0xe8) getgid() fcntl$getown(r0, 0x9) getresuid(&(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)) lstat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)) fcntl$getown(r3, 0x9) geteuid() getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180), &(0x7f0000001e00)=0xc) getpgid(0x0) fstat(0xffffffffffffffff, &(0x7f0000000640)) getgid() stat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000280)) getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000006e80)) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f00000037c0), &(0x7f0000003800)=0xc) getgroups(0x9, &(0x7f0000003840)=[0xffffffffffffffff, 0x0, 0xee00, 0xee00, 0xee00, 0xee01, 0x0, 0xffffffffffffffff, 0x0]) gettid() getgroups(0x4, &(0x7f0000003f40)=[0xffffffffffffffff, 0xee01, 0xee00, 0xee00]) fcntl$getownex(r3, 0x10, &(0x7f0000005600)) getresuid(0x0, &(0x7f0000005680), &(0x7f00000056c0)) getresgid(&(0x7f0000005700), &(0x7f0000006e00), &(0x7f0000003780)) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000005c00)) getsockopt$inet6_IPV6_IPSEC_POLICY(r3, 0x29, 0x22, &(0x7f0000005c40)={{{@in=@multicast2, @in=@broadcast}}, {{@in=@multicast1}, 0x0, @in6=@mcast1}}, &(0x7f0000005d40)=0xe8) stat(&(0x7f0000005d80)='./file0\x00', &(0x7f0000005dc0)) fcntl$getown(0xffffffffffffffff, 0x9) getgid() openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000006080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) fcntl$getown(r2, 0x9) lstat(&(0x7f0000006140)='./file0\x00', &(0x7f0000006180)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000006200)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000006240)={{{@in6=@mcast1, @in=@multicast1}}, {{@in6=@loopback}}}, &(0x7f0000006340)=0xe8) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000006380), &(0x7f00000003c0)=0xc) gettid() geteuid() getresgid(&(0x7f0000006a80), &(0x7f0000006ac0), &(0x7f0000006b00)) sendmmsg$unix(r3, &(0x7f0000006c00)=[{&(0x7f0000006500)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000006940)=[{&(0x7f0000006900)="248edb1e1a09ae6586cf0cd45cf2c16ad16ab0ca907b0bdd1d7041788657045392827d1d0dbfc4f4665b21b009b237a11c12ea9cb54e80b76a", 0x39}], 0x1, 0x0, 0x0, 0x20008000}], 0x1, 0x0) msgget$private(0x0, 0x10) r4 = add_key$keyring(&(0x7f0000000400)='keyring\x00', &(0x7f0000000440)={'syz'}, 0x0, 0x0, 0xfffffffffffffffb) keyctl$chown(0x4, r4, 0x0, 0x0) [ 2683.335879][T26748] FAULT_INJECTION: forcing a failure. [ 2683.335879][T26748] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.351907][T26748] CPU: 1 PID: 26748 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2683.359544][T26748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2683.369585][T26748] Call Trace: [ 2683.372883][T26748] dump_stack+0x172/0x1f0 [ 2683.377228][T26748] should_fail.cold+0xa/0x15 [ 2683.381822][T26748] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2683.387636][T26748] ? ___might_sleep+0x163/0x280 [ 2683.392493][T26748] __should_failslab+0x121/0x190 [ 2683.397436][T26748] should_failslab+0x9/0x14 [ 2683.401935][T26748] kmem_cache_alloc_node+0x264/0x710 [ 2683.407219][T26748] alloc_unbound_pwq+0x4c5/0xcf0 [ 2683.412155][T26748] apply_wqattrs_prepare+0x35e/0x970 [ 2683.417445][T26748] apply_workqueue_attrs_locked+0xcb/0x140 [ 2683.423247][T26748] apply_workqueue_attrs+0x31/0x50 [ 2683.428366][T26748] alloc_workqueue+0x84c/0xe70 [ 2683.433146][T26748] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2683.438863][T26748] ? kmem_cache_alloc_trace+0x354/0x760 [ 2683.444411][T26748] hci_register_dev+0x1b8/0x860 [ 2683.449243][T26748] ? __raw_spin_lock_init+0x2d/0x100 [ 2683.454534][T26748] hci_uart_tty_ioctl+0x766/0xb00 [ 2683.459566][T26748] tty_ioctl+0xac9/0x14d0 [ 2683.463892][T26748] ? hci_uart_init_work+0x150/0x150 [ 2683.469064][T26748] ? tty_register_device+0x40/0x40 [ 2683.474151][T26748] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2683.480373][T26748] ? tomoyo_init_request_info+0x105/0x1d0 [ 2683.486068][T26748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2683.492294][T26748] ? tomoyo_path_number_perm+0x263/0x520 [ 2683.497901][T26748] ? find_held_lock+0x35/0x130 [ 2683.502648][T26748] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2683.508438][T26748] ? __fget+0x35a/0x550 [ 2683.512579][T26748] ? tty_register_device+0x40/0x40 [ 2683.517682][T26748] do_vfs_ioctl+0xd6e/0x1390 [ 2683.522268][T26748] ? ioctl_preallocate+0x210/0x210 [ 2683.527353][T26748] ? __fget+0x381/0x550 [ 2683.531491][T26748] ? ksys_dup3+0x3e0/0x3e0 [ 2683.535887][T26748] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2683.542104][T26748] ? fput_many+0x12c/0x1a0 [ 2683.546500][T26748] ? tomoyo_file_ioctl+0x23/0x30 [ 2683.551412][T26748] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2683.557627][T26748] ? security_file_ioctl+0x93/0xc0 [ 2683.562713][T26748] ksys_ioctl+0xab/0xd0 [ 2683.566844][T26748] __x64_sys_ioctl+0x73/0xb0 [ 2683.571413][T26748] do_syscall_64+0x103/0x610 [ 2683.575983][T26748] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2683.581848][T26748] RIP: 0033:0x457f29 [ 2683.585717][T26748] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2683.605302][T26748] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2683.613681][T26748] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2683.621626][T26748] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 13:33:06 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) 13:33:06 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x48000000]}) [ 2683.629565][T26748] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2683.637517][T26748] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2683.645458][T26748] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2683.666863][T26748] Bluetooth: Can't register HCI device 13:33:06 executing program 1 (fault-call:4 fault-nth:10): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:06 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae46, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:06 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x100000000000000}, 0x80, 0x0}, 0x0) 13:33:06 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 13:33:06 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c000000]}) 13:33:06 executing program 5: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000140)) ioctl$KVM_SET_GSI_ROUTING(r1, 0x4008ae6a, &(0x7f0000000280)) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(0xffffffffffffffff, 0x8208ae63, 0x0) [ 2683.856422][T27210] FAULT_INJECTION: forcing a failure. [ 2683.856422][T27210] name failslab, interval 1, probability 0, space 0, times 0 [ 2683.970565][T27210] CPU: 1 PID: 27210 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2683.978212][T27210] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2683.988257][T27210] Call Trace: [ 2683.991536][T27210] dump_stack+0x172/0x1f0 [ 2683.995851][T27210] should_fail.cold+0xa/0x15 [ 2684.000421][T27210] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2684.006206][T27210] ? ___might_sleep+0x163/0x280 [ 2684.011043][T27210] __should_failslab+0x121/0x190 [ 2684.015959][T27210] should_failslab+0x9/0x14 [ 2684.020443][T27210] __kmalloc+0x2dc/0x740 [ 2684.024664][T27210] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 2684.030362][T27210] ? pwq_adjust_max_active+0x3b6/0x5c0 [ 2684.035796][T27210] ? alloc_workqueue+0x13c/0xe70 [ 2684.040708][T27210] alloc_workqueue+0x13c/0xe70 [ 2684.045446][T27210] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2684.051165][T27210] ? kmem_cache_alloc_trace+0x354/0x760 [ 2684.056691][T27210] hci_register_dev+0x209/0x860 [ 2684.061520][T27210] hci_uart_tty_ioctl+0x766/0xb00 [ 2684.066520][T27210] tty_ioctl+0xac9/0x14d0 [ 2684.070831][T27210] ? hci_uart_init_work+0x150/0x150 [ 2684.076003][T27210] ? tty_register_device+0x40/0x40 [ 2684.081201][T27210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2684.087424][T27210] ? tomoyo_init_request_info+0x105/0x1d0 [ 2684.093122][T27210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.099338][T27210] ? tomoyo_path_number_perm+0x263/0x520 [ 2684.104944][T27210] ? find_held_lock+0x35/0x130 [ 2684.109684][T27210] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2684.115476][T27210] ? __fget+0x35a/0x550 [ 2684.119616][T27210] ? tty_register_device+0x40/0x40 [ 2684.124705][T27210] do_vfs_ioctl+0xd6e/0x1390 [ 2684.129275][T27210] ? ioctl_preallocate+0x210/0x210 [ 2684.134364][T27210] ? __fget+0x381/0x550 [ 2684.138498][T27210] ? ksys_dup3+0x3e0/0x3e0 [ 2684.142887][T27210] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2684.149104][T27210] ? fput_many+0x12c/0x1a0 [ 2684.153500][T27210] ? tomoyo_file_ioctl+0x23/0x30 [ 2684.158414][T27210] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.164630][T27210] ? security_file_ioctl+0x93/0xc0 [ 2684.169808][T27210] ksys_ioctl+0xab/0xd0 [ 2684.174398][T27210] __x64_sys_ioctl+0x73/0xb0 [ 2684.178972][T27210] do_syscall_64+0x103/0x610 [ 2684.183541][T27210] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2684.189407][T27210] RIP: 0033:0x457f29 [ 2684.193283][T27210] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2684.212860][T27210] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020ae76, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2684.221245][T27210] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2684.229194][T27210] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2684.237147][T27210] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2684.245091][T27210] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2684.253039][T27210] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:33:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) 13:33:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x68000000]}) [ 2684.346439][T27210] Bluetooth: Can't register HCI device 13:33:07 executing program 1 (fault-call:4 fault-nth:11): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x200000000000000}, 0x80, 0x0}, 0x0) 13:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4040ae79, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2684.497997][T27776] FAULT_INJECTION: forcing a failure. [ 2684.497997][T27776] name failslab, interval 1, probability 0, space 0, times 0 13:33:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2684.563904][T27776] CPU: 0 PID: 27776 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2684.571552][T27776] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2684.581619][T27776] Call Trace: [ 2684.584909][T27776] dump_stack+0x172/0x1f0 [ 2684.589243][T27776] should_fail.cold+0xa/0x15 [ 2684.593845][T27776] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2684.599656][T27776] ? ___might_sleep+0x163/0x280 [ 2684.604521][T27776] __should_failslab+0x121/0x190 [ 2684.609462][T27776] should_failslab+0x9/0x14 [ 2684.613963][T27776] kmem_cache_alloc_trace+0x2d1/0x760 [ 2684.619333][T27776] ? rcu_read_lock_sched_held+0x110/0x130 [ 2684.625048][T27776] ? __kmalloc+0x5d5/0x740 [ 2684.629483][T27776] alloc_workqueue_attrs+0x82/0x120 [ 2684.634716][T27776] alloc_workqueue+0x166/0xe70 [ 2684.639490][T27776] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2684.645230][T27776] ? kmem_cache_alloc_trace+0x354/0x760 [ 2684.650775][T27776] hci_register_dev+0x209/0x860 [ 2684.650796][T27776] hci_uart_tty_ioctl+0x766/0xb00 [ 2684.660633][T27776] tty_ioctl+0xac9/0x14d0 [ 2684.664958][T27776] ? hci_uart_init_work+0x150/0x150 [ 2684.664977][T27776] ? tty_register_device+0x40/0x40 [ 2684.664990][T27776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2684.665004][T27776] ? tomoyo_init_request_info+0x105/0x1d0 [ 2684.665019][T27776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.665032][T27776] ? tomoyo_path_number_perm+0x263/0x520 [ 2684.665045][T27776] ? find_held_lock+0x35/0x130 [ 2684.665060][T27776] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2684.665081][T27776] ? __fget+0x35a/0x550 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c000000]}) [ 2684.665100][T27776] ? tty_register_device+0x40/0x40 [ 2684.665116][T27776] do_vfs_ioctl+0xd6e/0x1390 [ 2684.665131][T27776] ? ioctl_preallocate+0x210/0x210 [ 2684.665142][T27776] ? __fget+0x381/0x550 [ 2684.665160][T27776] ? ksys_dup3+0x3e0/0x3e0 [ 2684.665181][T27776] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2684.665195][T27776] ? fput_many+0x12c/0x1a0 [ 2684.665212][T27776] ? tomoyo_file_ioctl+0x23/0x30 [ 2684.665224][T27776] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2684.665238][T27776] ? security_file_ioctl+0x93/0xc0 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4068aea3, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2684.665252][T27776] ksys_ioctl+0xab/0xd0 [ 2684.665268][T27776] __x64_sys_ioctl+0x73/0xb0 [ 2684.665284][T27776] do_syscall_64+0x103/0x610 [ 2684.665302][T27776] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2684.665313][T27776] RIP: 0033:0x457f29 [ 2684.665327][T27776] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2684.665334][T27776] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2684.665348][T27776] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2684.665357][T27776] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2684.665365][T27776] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2684.665372][T27776] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2684.665381][T27776] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:33:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 13:33:07 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0x4000000000000000}, 0x80, 0x0}, 0x0) [ 2684.962797][T27776] Bluetooth: Can't register HCI device 13:33:07 executing program 1 (fault-call:4 fault-nth:12): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x74000000]}) 13:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:07 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:07 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) 13:33:07 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc0045878, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2685.169896][T28602] FAULT_INJECTION: forcing a failure. [ 2685.169896][T28602] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.209938][T28602] CPU: 0 PID: 28602 Comm: syz-executor.1 Not tainted 5.0.0+ #15 13:33:07 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7a000000]}) [ 2685.217573][T28602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2685.227626][T28602] Call Trace: [ 2685.230922][T28602] dump_stack+0x172/0x1f0 [ 2685.235262][T28602] should_fail.cold+0xa/0x15 [ 2685.239980][T28602] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2685.245807][T28602] ? ___might_sleep+0x163/0x280 [ 2685.250655][T28602] __should_failslab+0x121/0x190 [ 2685.255586][T28602] should_failslab+0x9/0x14 [ 2685.255601][T28602] kmem_cache_alloc_trace+0x2d1/0x760 [ 2685.255615][T28602] ? rcu_read_lock_sched_held+0x110/0x130 [ 2685.255627][T28602] ? __kmalloc+0x5d5/0x740 [ 2685.255644][T28602] alloc_workqueue_attrs+0x82/0x120 [ 2685.255661][T28602] alloc_workqueue+0x166/0xe70 [ 2685.265495][T28602] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2685.265521][T28602] ? kmem_cache_alloc_trace+0x354/0x760 [ 2685.265543][T28602] hci_register_dev+0x209/0x860 [ 2685.265565][T28602] hci_uart_tty_ioctl+0x766/0xb00 [ 2685.265584][T28602] tty_ioctl+0xac9/0x14d0 [ 2685.310943][T28602] ? hci_uart_init_work+0x150/0x150 13:33:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) [ 2685.316148][T28602] ? tty_register_device+0x40/0x40 [ 2685.321258][T28602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2685.327490][T28602] ? tomoyo_init_request_info+0x105/0x1d0 [ 2685.333232][T28602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2685.339469][T28602] ? tomoyo_path_number_perm+0x263/0x520 [ 2685.345095][T28602] ? find_held_lock+0x35/0x130 [ 2685.349867][T28602] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2685.355676][T28602] ? __fget+0x35a/0x550 [ 2685.359834][T28602] ? tty_register_device+0x40/0x40 [ 2685.364953][T28602] do_vfs_ioctl+0xd6e/0x1390 13:33:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2685.369539][T28602] ? ioctl_preallocate+0x210/0x210 [ 2685.369554][T28602] ? __fget+0x381/0x550 [ 2685.369574][T28602] ? ksys_dup3+0x3e0/0x3e0 [ 2685.369586][T28602] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2685.369603][T28602] ? fput_many+0x12c/0x1a0 [ 2685.389527][T28602] ? tomoyo_file_ioctl+0x23/0x30 [ 2685.389543][T28602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2685.389576][T28602] ? security_file_ioctl+0x93/0xc0 [ 2685.389593][T28602] ksys_ioctl+0xab/0xd0 [ 2685.389611][T28602] __x64_sys_ioctl+0x73/0xb0 [ 2685.414351][T28602] do_syscall_64+0x103/0x610 [ 2685.423517][T28602] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2685.429402][T28602] RIP: 0033:0x457f29 [ 2685.433296][T28602] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2685.433304][T28602] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2685.433318][T28602] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:33:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0xeffdffff00000000}, 0x80, 0x0}, 0x0) [ 2685.433326][T28602] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2685.433334][T28602] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2685.433342][T28602] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2685.433350][T28602] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2685.459933][T28602] Bluetooth: Can't register HCI device 13:33:08 executing program 1 (fault-call:4 fault-nth:13): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc008ae67, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000]}) 13:33:08 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 13:33:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000]}) 13:33:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc00caee0, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2685.798684][T29255] FAULT_INJECTION: forcing a failure. [ 2685.798684][T29255] name failslab, interval 1, probability 0, space 0, times 0 [ 2685.831429][T29255] CPU: 0 PID: 29255 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2685.839063][T29255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 13:33:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2685.849122][T29255] Call Trace: [ 2685.852405][T29255] dump_stack+0x172/0x1f0 [ 2685.852427][T29255] should_fail.cold+0xa/0x15 [ 2685.852445][T29255] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2685.852464][T29255] ? ___might_sleep+0x163/0x280 [ 2685.852501][T29255] __should_failslab+0x121/0x190 [ 2685.867197][T29255] should_failslab+0x9/0x14 [ 2685.867214][T29255] __kmalloc+0x2dc/0x740 [ 2685.867236][T29255] ? apply_wqattrs_prepare+0xae/0x970 [ 2685.867256][T29255] apply_wqattrs_prepare+0xae/0x970 [ 2685.896268][T29255] apply_workqueue_attrs_locked+0xcb/0x140 [ 2685.902074][T29255] apply_workqueue_attrs+0x31/0x50 [ 2685.902090][T29255] alloc_workqueue+0x84c/0xe70 [ 2685.902111][T29255] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2685.902133][T29255] ? kmem_cache_alloc_trace+0x354/0x760 [ 2685.902153][T29255] hci_register_dev+0x209/0x860 [ 2685.923210][T29255] hci_uart_tty_ioctl+0x766/0xb00 [ 2685.923231][T29255] tty_ioctl+0xac9/0x14d0 [ 2685.923247][T29255] ? hci_uart_init_work+0x150/0x150 [ 2685.923260][T29255] ? tty_register_device+0x40/0x40 13:33:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) [ 2685.923278][T29255] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2685.953886][T29255] ? tomoyo_init_request_info+0x105/0x1d0 [ 2685.959593][T29255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2685.965817][T29255] ? tomoyo_path_number_perm+0x263/0x520 [ 2685.965831][T29255] ? find_held_lock+0x35/0x130 [ 2685.965845][T29255] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2685.965867][T29255] ? __fget+0x35a/0x550 [ 2685.976203][T29255] ? tty_register_device+0x40/0x40 [ 2685.976220][T29255] do_vfs_ioctl+0xd6e/0x1390 [ 2685.976239][T29255] ? ioctl_preallocate+0x210/0x210 [ 2685.976251][T29255] ? __fget+0x381/0x550 [ 2685.976270][T29255] ? ksys_dup3+0x3e0/0x3e0 [ 2685.976283][T29255] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2685.976298][T29255] ? fput_many+0x12c/0x1a0 [ 2685.976323][T29255] ? tomoyo_file_ioctl+0x23/0x30 [ 2685.995887][T29255] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2686.009675][T29255] ? security_file_ioctl+0x93/0xc0 [ 2686.009694][T29255] ksys_ioctl+0xab/0xd0 [ 2686.009710][T29255] __x64_sys_ioctl+0x73/0xb0 [ 2686.009728][T29255] do_syscall_64+0x103/0x610 [ 2686.050497][T29255] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2686.056377][T29255] RIP: 0033:0x457f29 [ 2686.060266][T29255] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2686.080005][T29255] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2686.080020][T29255] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:33:08 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1, 0x0, 0xffffff7f00000000}, 0x80, 0x0}, 0x0) [ 2686.080028][T29255] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2686.080036][T29255] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2686.080044][T29255] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2686.080058][T29255] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2686.118360][T29255] Bluetooth: Can't register HCI device 13:33:08 executing program 1 (fault-call:4 fault-nth:14): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:08 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc0189436, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:08 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000]}) 13:33:08 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) 13:33:08 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2686.271161][T29679] FAULT_INJECTION: forcing a failure. [ 2686.271161][T29679] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.299095][T29679] CPU: 0 PID: 29679 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2686.306734][T29679] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2686.316772][T29679] Call Trace: [ 2686.320065][T29679] dump_stack+0x172/0x1f0 [ 2686.324404][T29679] should_fail.cold+0xa/0x15 [ 2686.328990][T29679] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2686.329011][T29679] ? ___might_sleep+0x163/0x280 [ 2686.329037][T29679] __should_failslab+0x121/0x190 [ 2686.339639][T29679] should_failslab+0x9/0x14 [ 2686.339654][T29679] kmem_cache_alloc_trace+0x2d1/0x760 [ 2686.339672][T29679] ? rcu_read_lock_sched_held+0x110/0x130 [ 2686.349068][T29679] ? __kmalloc+0x5d5/0x740 [ 2686.349090][T29679] alloc_workqueue_attrs+0x82/0x120 13:33:09 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2686.349108][T29679] apply_wqattrs_prepare+0xbb/0x970 [ 2686.360175][T29679] apply_workqueue_attrs_locked+0xcb/0x140 [ 2686.360193][T29679] apply_workqueue_attrs+0x31/0x50 [ 2686.360211][T29679] alloc_workqueue+0x84c/0xe70 [ 2686.390561][T29679] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2686.396293][T29679] ? kmem_cache_alloc_trace+0x354/0x760 [ 2686.401836][T29679] hci_register_dev+0x209/0x860 [ 2686.406688][T29679] hci_uart_tty_ioctl+0x766/0xb00 [ 2686.411714][T29679] tty_ioctl+0xac9/0x14d0 [ 2686.416046][T29679] ? hci_uart_init_work+0x150/0x150 13:33:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc018aec0, &(0x7f0000000100)={0x0, 0xf, @ioapic}) [ 2686.421235][T29679] ? tty_register_device+0x40/0x40 [ 2686.426336][T29679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2686.432563][T29679] ? tomoyo_init_request_info+0x105/0x1d0 [ 2686.432579][T29679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2686.432592][T29679] ? tomoyo_path_number_perm+0x263/0x520 [ 2686.432604][T29679] ? find_held_lock+0x35/0x130 [ 2686.432618][T29679] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2686.432643][T29679] ? __fget+0x35a/0x550 [ 2686.444541][T29679] ? tty_register_device+0x40/0x40 13:33:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) [ 2686.444557][T29679] do_vfs_ioctl+0xd6e/0x1390 [ 2686.444574][T29679] ? ioctl_preallocate+0x210/0x210 [ 2686.444589][T29679] ? __fget+0x381/0x550 [ 2686.483729][T29679] ? ksys_dup3+0x3e0/0x3e0 [ 2686.488135][T29679] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2686.494362][T29679] ? fput_many+0x12c/0x1a0 [ 2686.498769][T29679] ? tomoyo_file_ioctl+0x23/0x30 [ 2686.498788][T29679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2686.509919][T29679] ? security_file_ioctl+0x93/0xc0 [ 2686.515044][T29679] ksys_ioctl+0xab/0xd0 13:33:09 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2686.515078][T29679] __x64_sys_ioctl+0x73/0xb0 [ 2686.515108][T29679] do_syscall_64+0x103/0x610 [ 2686.515127][T29679] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2686.534246][T29679] RIP: 0033:0x457f29 [ 2686.538138][T29679] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2686.557746][T29679] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 13:33:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000000]}) [ 2686.566146][T29679] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2686.566154][T29679] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2686.566160][T29679] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2686.566171][T29679] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2686.590024][T29679] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 13:33:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) [ 2686.698494][T29679] Bluetooth: Can't register HCI device 13:33:09 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0xc, 0x0}, 0x0) 13:33:09 executing program 1 (fault-call:4 fault-nth:15): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0xc020660b, &(0x7f0000000100)={0x0, 0xf, @ioapic}) 13:33:09 executing program 5: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000]}) 13:33:09 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:09 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 2686.906549][T30440] FAULT_INJECTION: forcing a failure. [ 2686.906549][T30440] name failslab, interval 1, probability 0, space 0, times 0 [ 2686.931880][T30440] CPU: 1 PID: 30440 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2686.939515][T30440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2686.949555][T30440] Call Trace: 13:33:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000]}) 13:33:09 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x80ffff, 0xf, @ioapic}) 13:33:09 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2686.952843][T30440] dump_stack+0x172/0x1f0 [ 2686.957175][T30440] should_fail.cold+0xa/0x15 [ 2686.961773][T30440] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2686.967586][T30440] ? ___might_sleep+0x163/0x280 [ 2686.972438][T30440] __should_failslab+0x121/0x190 [ 2686.977370][T30440] should_failslab+0x9/0x14 [ 2686.977387][T30440] kmem_cache_alloc_trace+0x2d1/0x760 [ 2686.977405][T30440] ? rcu_read_lock_sched_held+0x110/0x130 [ 2686.987242][T30440] ? __kmalloc+0x5d5/0x740 [ 2686.987264][T30440] alloc_workqueue_attrs+0x82/0x120 [ 2686.987283][T30440] apply_wqattrs_prepare+0xc8/0x970 [ 2687.008087][T30440] apply_workqueue_attrs_locked+0xcb/0x140 [ 2687.013914][T30440] apply_workqueue_attrs+0x31/0x50 [ 2687.019040][T30440] alloc_workqueue+0x84c/0xe70 [ 2687.023811][T30440] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2687.029532][T30440] ? kmem_cache_alloc_trace+0x354/0x760 [ 2687.035074][T30440] hci_register_dev+0x209/0x860 [ 2687.035097][T30440] hci_uart_tty_ioctl+0x766/0xb00 [ 2687.035114][T30440] tty_ioctl+0xac9/0x14d0 [ 2687.035130][T30440] ? hci_uart_init_work+0x150/0x150 [ 2687.044961][T30440] ? tty_register_device+0x40/0x40 [ 2687.044982][T30440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2687.044995][T30440] ? tomoyo_init_request_info+0x105/0x1d0 [ 2687.045008][T30440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2687.045024][T30440] ? tomoyo_path_number_perm+0x263/0x520 [ 2687.065805][T30440] ? find_held_lock+0x35/0x130 [ 2687.065824][T30440] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2687.065849][T30440] ? __fget+0x35a/0x550 [ 2687.077852][T30440] ? tty_register_device+0x40/0x40 13:33:09 executing program 5: socket$inet_udplite(0x2, 0x2, 0x88) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000080)="0adc1f123c123f3188b070") r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2687.077870][T30440] do_vfs_ioctl+0xd6e/0x1390 [ 2687.077891][T30440] ? ioctl_preallocate+0x210/0x210 [ 2687.113020][T30440] ? __fget+0x381/0x550 [ 2687.113041][T30440] ? ksys_dup3+0x3e0/0x3e0 [ 2687.113056][T30440] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2687.113069][T30440] ? fput_many+0x12c/0x1a0 [ 2687.113101][T30440] ? tomoyo_file_ioctl+0x23/0x30 [ 2687.132239][T30440] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2687.132255][T30440] ? security_file_ioctl+0x93/0xc0 [ 2687.132285][T30440] ksys_ioctl+0xab/0xd0 [ 2687.132301][T30440] __x64_sys_ioctl+0x73/0xb0 13:33:09 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000]}) [ 2687.157211][T30440] do_syscall_64+0x103/0x610 [ 2687.157229][T30440] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2687.157245][T30440] RIP: 0033:0x457f29 [ 2687.172069][T30440] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2687.172077][T30440] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2687.172090][T30440] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2687.172103][T30440] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2687.215989][T30440] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2687.223948][T30440] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2687.223964][T30440] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2687.276509][T30440] Bluetooth: Can't register HCI device 13:33:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x13, 0x0}, 0x0) 13:33:10 executing program 1 (fault-call:4 fault-nth:16): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:10 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 13:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0xffff8000, 0xf, @ioapic}) 13:33:10 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4800000000000000]}) 13:33:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x80ffff00000000, 0xf, @ioapic}) 13:33:10 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 2687.549961][T31048] FAULT_INJECTION: forcing a failure. [ 2687.549961][T31048] name failslab, interval 1, probability 0, space 0, times 0 [ 2687.580087][T31048] CPU: 1 PID: 31048 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2687.587725][T31048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2687.597759][T31048] Call Trace: [ 2687.597780][T31048] dump_stack+0x172/0x1f0 [ 2687.597802][T31048] should_fail.cold+0xa/0x15 [ 2687.609960][T31048] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2687.615773][T31048] ? ___might_sleep+0x163/0x280 [ 2687.620619][T31048] __should_failslab+0x121/0x190 [ 2687.625553][T31048] should_failslab+0x9/0x14 [ 2687.630062][T31048] kmem_cache_alloc_node+0x264/0x710 [ 2687.630086][T31048] alloc_unbound_pwq+0x4c5/0xcf0 [ 2687.640275][T31048] apply_wqattrs_prepare+0x35e/0x970 [ 2687.645560][T31048] apply_workqueue_attrs_locked+0xcb/0x140 [ 2687.645577][T31048] apply_workqueue_attrs+0x31/0x50 [ 2687.645595][T31048] alloc_workqueue+0x84c/0xe70 [ 2687.661195][T31048] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2687.666913][T31048] ? kmem_cache_alloc_trace+0x354/0x760 [ 2687.672465][T31048] hci_register_dev+0x209/0x860 [ 2687.672489][T31048] hci_uart_tty_ioctl+0x766/0xb00 [ 2687.672510][T31048] tty_ioctl+0xac9/0x14d0 [ 2687.682343][T31048] ? hci_uart_init_work+0x150/0x150 [ 2687.682362][T31048] ? tty_register_device+0x40/0x40 [ 2687.682375][T31048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2687.682393][T31048] ? tomoyo_init_request_info+0x105/0x1d0 [ 2687.691890][T31048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2687.691906][T31048] ? tomoyo_path_number_perm+0x263/0x520 [ 2687.691926][T31048] ? find_held_lock+0x35/0x130 [ 2687.691939][T31048] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2687.691960][T31048] ? __fget+0x35a/0x550 [ 2687.703272][T31048] ? tty_register_device+0x40/0x40 [ 2687.703289][T31048] do_vfs_ioctl+0xd6e/0x1390 [ 2687.703309][T31048] ? ioctl_preallocate+0x210/0x210 13:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic={0x80ffff}}) [ 2687.735449][T31048] ? __fget+0x381/0x550 [ 2687.735469][T31048] ? ksys_dup3+0x3e0/0x3e0 [ 2687.735479][T31048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2687.735497][T31048] ? fput_many+0x12c/0x1a0 [ 2687.745140][T31048] ? tomoyo_file_ioctl+0x23/0x30 [ 2687.745155][T31048] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2687.745170][T31048] ? security_file_ioctl+0x93/0xc0 [ 2687.745191][T31048] ksys_ioctl+0xab/0xd0 [ 2687.789779][T31048] __x64_sys_ioctl+0x73/0xb0 [ 2687.794382][T31048] do_syscall_64+0x103/0x610 13:33:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x0, &(0x7f0000000080)="0adc1f123c123f3188b070") r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) [ 2687.798970][T31048] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2687.804857][T31048] RIP: 0033:0x457f29 [ 2687.808751][T31048] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2687.828348][T31048] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2687.836749][T31048] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 13:33:10 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x4c00000000000000]}) [ 2687.836757][T31048] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2687.836765][T31048] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2687.836772][T31048] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2687.836780][T31048] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2687.854097][T31048] Bluetooth: Can't register HCI device [ 2687.870079][ C1] net_ratelimit: 22 callbacks suppressed [ 2687.870086][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.870118][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2687.870191][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2687.870225][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:33:10 executing program 4: r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmsg(r0, &(0x7f0000001380)={&(0x7f00000000c0)=@nfc={0x27, 0x1}, 0x20000140, 0x0}, 0x0) 13:33:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:10 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) 13:33:10 executing program 1 (fault-call:4 fault-nth:17): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:10 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_ENABLE_CAP(r1, 0x4068aea3, &(0x7f0000000040)={0x81, 0x0, [0x3]}) ioctl$KVM_SET_IRQCHIP(r1, 0x4020aea5, &(0x7f0000000100)={0x0, 0xf, @ioapic={0xffff8000}}) 13:33:10 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6800000000000000]}) [ 2688.103307][T31327] FAULT_INJECTION: forcing a failure. [ 2688.103307][T31327] name failslab, interval 1, probability 0, space 0, times 0 [ 2688.137554][T31327] CPU: 0 PID: 31327 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2688.145199][T31327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2688.155247][T31327] Call Trace: [ 2688.158538][T31327] dump_stack+0x172/0x1f0 [ 2688.162884][T31327] should_fail.cold+0xa/0x15 [ 2688.167482][T31327] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2688.173299][T31327] ? ___might_sleep+0x163/0x280 [ 2688.178164][T31327] __should_failslab+0x121/0x190 [ 2688.183104][T31327] should_failslab+0x9/0x14 [ 2688.187610][T31327] kmem_cache_alloc_node+0x264/0x710 [ 2688.192908][T31327] alloc_unbound_pwq+0x4c5/0xcf0 [ 2688.197864][T31327] apply_wqattrs_prepare+0x35e/0x970 [ 2688.203174][T31327] apply_workqueue_attrs_locked+0xcb/0x140 [ 2688.208989][T31327] apply_workqueue_attrs+0x31/0x50 [ 2688.214100][T31327] alloc_workqueue+0x84c/0xe70 [ 2688.218884][T31327] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2688.224601][T31327] ? kmem_cache_alloc_trace+0x354/0x760 [ 2688.230152][T31327] hci_register_dev+0x209/0x860 [ 2688.235012][T31327] hci_uart_tty_ioctl+0x766/0xb00 [ 2688.240046][T31327] tty_ioctl+0xac9/0x14d0 [ 2688.244378][T31327] ? hci_uart_init_work+0x150/0x150 13:33:10 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:10 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) 13:33:10 executing program 2: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x6c00000000000000]}) [ 2688.249581][T31327] ? tty_register_device+0x40/0x40 [ 2688.254686][T31327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2688.260919][T31327] ? tomoyo_init_request_info+0x105/0x1d0 [ 2688.266628][T31327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2688.272944][T31327] ? tomoyo_path_number_perm+0x263/0x520 [ 2688.272956][T31327] ? find_held_lock+0x35/0x130 [ 2688.272969][T31327] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2688.272990][T31327] ? __fget+0x35a/0x550 [ 2688.273009][T31327] ? tty_register_device+0x40/0x40 [ 2688.273022][T31327] do_vfs_ioctl+0xd6e/0x1390 [ 2688.273038][T31327] ? ioctl_preallocate+0x210/0x210 [ 2688.273053][T31327] ? __fget+0x381/0x550 [ 2688.283401][T31327] ? ksys_dup3+0x3e0/0x3e0 [ 2688.283413][T31327] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2688.283426][T31327] ? fput_many+0x12c/0x1a0 [ 2688.283444][T31327] ? tomoyo_file_ioctl+0x23/0x30 [ 2688.283454][T31327] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2688.283469][T31327] ? security_file_ioctl+0x93/0xc0 [ 2688.293376][T31327] ksys_ioctl+0xab/0xd0 [ 2688.293396][T31327] __x64_sys_ioctl+0x73/0xb0 [ 2688.293415][T31327] do_syscall_64+0x103/0x610 [ 2688.293435][T31327] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.293446][T31327] RIP: 0033:0x457f29 [ 2688.293461][T31327] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2688.293469][T31327] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2688.293483][T31327] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2688.293490][T31327] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2688.293503][T31327] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2688.303151][T31327] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2688.303160][T31327] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2688.314760][T31327] Bluetooth: Can't register HCI device [ 2688.341806][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2688.367231][ C1] protocol 88fb is buggy, dev hsr_slave_1 13:33:11 executing program 1 (fault-call:4 fault-nth:18): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x0) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xf) ioctl$VIDIOC_CROPCAP(r1, 0x400455c8, 0x0) 13:33:11 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000180)="b7f2658a911993f0265df5cf1cdd8b55193568913aaf54469f46c5b5", 0x1c) 13:33:11 executing program 0: r0 = memfd_create(&(0x7f0000000400)='\xe87y\xd8\x0e\xfaE\xbb\x7fH\xbe\xbc\x95\x87\v\xd0\xcd9\xbd(0\xeeG\xaf\xe7\xb3?\xc7x\xbd\xe2R\xc5\r.', 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000700)='/dev/snd/seq\x00', 0x0, 0x0) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00\x00\x00\x00\x00\x00\x00\x001;\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x06\x00\x00\x00\x00\x00\xcc\xbf}\xdd\x00', 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x7400000000000000]}) [ 2688.395302][ C1] protocol 88fb is buggy, dev hsr_slave_0 [ 2688.419135][ C1] protocol 88fb is buggy, dev hsr_slave_1 [ 2688.487821][T31823] ================================================================== [ 2688.495893][T31823] BUG: KASAN: use-after-free in lockdep_register_key+0x3b9/0x490 [ 2688.495907][T31823] Read of size 8 at addr ffff888090d9f458 by task syz-executor.1/31823 [ 2688.495909][T31823] [ 2688.495922][T31823] CPU: 0 PID: 31823 Comm: syz-executor.1 Not tainted 5.0.0+ #15 [ 2688.495934][T31823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2688.531769][T31823] Call Trace: [ 2688.531789][T31823] dump_stack+0x172/0x1f0 [ 2688.531802][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2688.531819][T31823] print_address_description.cold+0x7c/0x20d [ 2688.531831][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2688.531855][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2688.561392][T31823] kasan_report.cold+0x1b/0x40 [ 2688.566152][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2688.571536][T31823] __asan_report_load8_noabort+0x14/0x20 [ 2688.577160][T31823] lockdep_register_key+0x3b9/0x490 [ 2688.582361][T31823] alloc_workqueue+0x427/0xe70 [ 2688.587203][T31823] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2688.592905][T31823] ? kmem_cache_alloc_trace+0x354/0x760 [ 2688.598448][T31823] hci_register_dev+0x1b8/0x860 [ 2688.598457][T31823] ? __raw_spin_lock_init+0x2d/0x100 [ 2688.598474][T31823] hci_uart_tty_ioctl+0x766/0xb00 [ 2688.613548][T31823] tty_ioctl+0xac9/0x14d0 [ 2688.617871][T31823] ? hci_uart_init_work+0x150/0x150 [ 2688.617882][T31823] ? tty_register_device+0x40/0x40 [ 2688.617898][T31823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2688.628135][T31823] ? tomoyo_init_request_info+0x105/0x1d0 [ 2688.628146][T31823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2688.628161][T31823] ? tomoyo_path_number_perm+0x263/0x520 [ 2688.640049][T31823] ? find_held_lock+0x35/0x130 [ 2688.640062][T31823] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2688.640076][T31823] ? __fget+0x35a/0x550 [ 2688.640092][T31823] ? tty_register_device+0x40/0x40 [ 2688.651904][T31823] do_vfs_ioctl+0xd6e/0x1390 [ 2688.651917][T31823] ? ioctl_preallocate+0x210/0x210 [ 2688.651928][T31823] ? __fget+0x381/0x550 [ 2688.651940][T31823] ? ksys_dup3+0x3e0/0x3e0 [ 2688.651951][T31823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2688.651963][T31823] ? fput_many+0x12c/0x1a0 [ 2688.651976][T31823] ? tomoyo_file_ioctl+0x23/0x30 [ 2688.651988][T31823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2688.651999][T31823] ? security_file_ioctl+0x93/0xc0 [ 2688.652010][T31823] ksys_ioctl+0xab/0xd0 [ 2688.652024][T31823] __x64_sys_ioctl+0x73/0xb0 [ 2688.662530][T31823] do_syscall_64+0x103/0x610 [ 2688.662545][T31823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.662554][T31823] RIP: 0033:0x457f29 [ 2688.662566][T31823] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2688.662573][T31823] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2688.662583][T31823] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2688.662594][T31823] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2688.671797][T31823] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2688.671804][T31823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2688.671811][T31823] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2688.671819][T31823] [ 2688.671825][T31823] Allocated by task 31327: [ 2688.671851][T31823] save_stack+0x45/0xd0 [ 2688.671863][T31823] __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 2688.671873][T31823] kasan_kmalloc+0x9/0x10 [ 2688.671882][T31823] __kmalloc+0x15c/0x740 [ 2688.671893][T31823] alloc_workqueue+0x13c/0xe70 [ 2688.671904][T31823] hci_register_dev+0x209/0x860 [ 2688.671915][T31823] hci_uart_tty_ioctl+0x766/0xb00 [ 2688.671925][T31823] tty_ioctl+0xac9/0x14d0 [ 2688.671939][T31823] do_vfs_ioctl+0xd6e/0x1390 [ 2688.856007][T31823] ksys_ioctl+0xab/0xd0 [ 2688.860147][T31823] __x64_sys_ioctl+0x73/0xb0 [ 2688.864713][T31823] do_syscall_64+0x103/0x610 [ 2688.869278][T31823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.875131][T31823] [ 2688.877441][T31823] Freed by task 31327: [ 2688.881488][T31823] save_stack+0x45/0xd0 [ 2688.885628][T31823] __kasan_slab_free+0x102/0x150 [ 2688.890533][T31823] kasan_slab_free+0xe/0x10 [ 2688.895004][T31823] kfree+0xcf/0x230 [ 2688.898798][T31823] alloc_workqueue+0xc3e/0xe70 [ 2688.903549][T31823] hci_register_dev+0x209/0x860 [ 2688.908372][T31823] hci_uart_tty_ioctl+0x766/0xb00 [ 2688.913366][T31823] tty_ioctl+0xac9/0x14d0 [ 2688.917663][T31823] do_vfs_ioctl+0xd6e/0x1390 [ 2688.922226][T31823] ksys_ioctl+0xab/0xd0 [ 2688.926361][T31823] __x64_sys_ioctl+0x73/0xb0 [ 2688.930918][T31823] do_syscall_64+0x103/0x610 [ 2688.935476][T31823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2688.941329][T31823] [ 2688.943632][T31823] The buggy address belongs to the object at ffff888090d9f340 [ 2688.943632][T31823] which belongs to the cache kmalloc-512 of size 512 [ 2688.957657][T31823] The buggy address is located 280 bytes inside of [ 2688.957657][T31823] 512-byte region [ffff888090d9f340, ffff888090d9f540) [ 2688.970890][T31823] The buggy address belongs to the page: [ 2688.976489][T31823] page:ffffea00024367c0 count:1 mapcount:0 mapping:ffff88812c3f0940 index:0xffff888090d9fd40 [ 2688.986621][T31823] flags: 0x1fffc0000000200(slab) [ 2688.991530][T31823] raw: 01fffc0000000200 ffff88812c3f1738 ffffea000267c7c8 ffff88812c3f0940 [ 2689.000094][T31823] raw: ffff888090d9fd40 ffff888090d9f0c0 0000000100000004 0000000000000000 [ 2689.008734][T31823] page dumped because: kasan: bad access detected [ 2689.015110][T31823] [ 2689.017407][T31823] Memory state around the buggy address: [ 2689.023104][T31823] ffff888090d9f300: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 2689.031231][T31823] ffff888090d9f380: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2689.039260][T31823] >ffff888090d9f400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2689.047287][T31823] ^ [ 2689.054191][T31823] ffff888090d9f480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 2689.062228][T31823] ffff888090d9f500: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 2689.070279][T31823] ================================================================== [ 2689.078310][T31823] Disabling lock debugging due to kernel taint [ 2689.084426][T31823] Kernel panic - not syncing: panic_on_warn set ... [ 2689.090981][T31823] CPU: 0 PID: 31823 Comm: syz-executor.1 Tainted: G B 5.0.0+ #15 [ 2689.099963][T31823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2689.109996][T31823] Call Trace: [ 2689.113261][T31823] dump_stack+0x172/0x1f0 [ 2689.117579][T31823] panic+0x2cb/0x65c [ 2689.121441][T31823] ? __warn_printk+0xf3/0xf3 [ 2689.125997][T31823] ? lock_downgrade+0x880/0x880 [ 2689.130828][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2689.136165][T31823] ? trace_hardirqs_off+0x62/0x220 [ 2689.141241][T31823] ? trace_hardirqs_off+0x59/0x220 [ 2689.146335][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2689.151674][T31823] end_report+0x47/0x4f [ 2689.155817][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2689.161156][T31823] kasan_report.cold+0xe/0x40 [ 2689.165806][T31823] ? lockdep_register_key+0x3b9/0x490 [ 2689.171400][T31823] __asan_report_load8_noabort+0x14/0x20 [ 2689.177000][T31823] lockdep_register_key+0x3b9/0x490 [ 2689.182173][T31823] alloc_workqueue+0x427/0xe70 [ 2689.186919][T31823] ? workqueue_sysfs_register+0x3f0/0x3f0 [ 2689.192604][T31823] ? kmem_cache_alloc_trace+0x354/0x760 [ 2689.198119][T31823] hci_register_dev+0x1b8/0x860 [ 2689.202936][T31823] ? __raw_spin_lock_init+0x2d/0x100 [ 2689.208192][T31823] hci_uart_tty_ioctl+0x766/0xb00 [ 2689.213190][T31823] tty_ioctl+0xac9/0x14d0 [ 2689.217488][T31823] ? hci_uart_init_work+0x150/0x150 [ 2689.222681][T31823] ? tty_register_device+0x40/0x40 [ 2689.227769][T31823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2689.233983][T31823] ? tomoyo_init_request_info+0x105/0x1d0 [ 2689.239668][T31823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2689.245877][T31823] ? tomoyo_path_number_perm+0x263/0x520 [ 2689.251476][T31823] ? find_held_lock+0x35/0x130 [ 2689.256218][T31823] ? tomoyo_execute_permission+0x4a0/0x4a0 [ 2689.262004][T31823] ? __fget+0x35a/0x550 [ 2689.266140][T31823] ? tty_register_device+0x40/0x40 [ 2689.271220][T31823] do_vfs_ioctl+0xd6e/0x1390 [ 2689.275776][T31823] ? ioctl_preallocate+0x210/0x210 [ 2689.280857][T31823] ? __fget+0x381/0x550 [ 2689.284983][T31823] ? ksys_dup3+0x3e0/0x3e0 [ 2689.289375][T31823] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2689.295584][T31823] ? fput_many+0x12c/0x1a0 [ 2689.300090][T31823] ? tomoyo_file_ioctl+0x23/0x30 [ 2689.304997][T31823] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2689.311205][T31823] ? security_file_ioctl+0x93/0xc0 [ 2689.316282][T31823] ksys_ioctl+0xab/0xd0 [ 2689.320433][T31823] __x64_sys_ioctl+0x73/0xb0 [ 2689.325005][T31823] do_syscall_64+0x103/0x610 [ 2689.329564][T31823] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2689.335426][T31823] RIP: 0033:0x457f29 [ 2689.339287][T31823] Code: ad b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 7b b8 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2689.358858][T31823] RSP: 002b:00007f49f6d2fc78 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2689.367237][T31823] RAX: ffffffffffffffda RBX: 00007f49f6d2fc90 RCX: 0000000000457f29 [ 2689.375182][T31823] RDX: 0000000000000000 RSI: 00000000400455c8 RDI: 0000000000000004 [ 2689.383130][T31823] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2689.391083][T31823] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f49f6d306d4 [ 2689.399022][T31823] R13: 00000000004c2913 R14: 00000000004d53a0 R15: 0000000000000005 [ 2689.407876][T31823] Kernel Offset: disabled [ 2689.412186][T31823] Rebooting in 86400 seconds..