TR_PROTOCOL={0x8, 0x2}, @IPVS_SVC_ATTR_PORT={0x8, 0x4}]}]}, 0x30}, 0x1}, 0x0) 04:25:11 executing program 4: r0 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000044000)=0x0) nanosleep(&(0x7f0000000080)={0x77359400}, &(0x7f00000000c0)) r2 = syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x200, 0x4000) r3 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x1f, 0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000180)={0x4}) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000040000)) timer_settime(r1, 0x1, &(0x7f0000000000)={{0x77359400}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x0, 0x100000000000031, 0xffffffffffffffff, 0x0) tkill(r0, 0x1000000000016) 04:25:11 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000d30000006301"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='ler\x00', 0x80000001, 0xbb, &(0x7f0000000300)=""/187}, 0x48) r0 = open(&(0x7f0000000200)='./file0\x00', 0x541800, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@local, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@mcast2}}, &(0x7f00000004c0)=0xe8) ioctl$sock_ifreq(r0, 0x8936, &(0x7f0000000180)={'ip_vti0\x00', @ifru_data=&(0x7f00000000c0)="19284c90b41b75799521d1d49535dc81bd05c82564f3c58df5d51d43602de63f"}) sendmsg$nl_route(r0, &(0x7f00000005c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x401}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="54000000130000032bbd7000fcdbdf2507000000", @ANYRES32=r1, @ANYBLOB="0008001e00a806000024000eec080000000000000007000000000000008100000000000000070000010000000008002c000101000000000000000000b5164f399a1cdb13ec6d23c0c2765270e9048696de4c1cf5da8ef468124a5915acf5d925d69c33951b7c1075e37f9d8eaa62b80f7928fbcc5ce2"], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x4084) 04:25:11 executing program 0: r0 = socket$inet6(0xa, 0x804, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x10, 0x802, 0x0) sendmsg$IPVS_CMD_FLUSH(r1, &(0x7f00000001c0)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000480)=ANY=[]}, 0x1}, 0x0) write(r1, &(0x7f0000000340)="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", 0xfc) pipe(&(0x7f0000000000)) 04:25:11 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000004ff6)='/dev/dsp#\x00', 0x1, 0x0) poll(&(0x7f0000ce5fd8)=[{r0}], 0x1, 0x0) ioctl$int_in(r0, 0x800800c004500a, &(0x7f0000000040)) fallocate(r0, 0x20, 0x8, 0x1) mmap$binder(&(0x7f000070f000/0x2000)=nil, 0x2000, 0x7, 0x12, r0, 0x0) 04:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:11 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e23, 0x4100000, @remote={0xfe, 0x80, [], 0xbb}}, 0x2) listen(r2, 0xffffffffffffff7f) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, &(0x7f0000e33fe0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback={0x0, 0x1}}, 0x1c) write$binfmt_misc(r3, &(0x7f0000000240)={'syz1'}, 0x34000) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000000c0)={{{@in6, @in6=@loopback}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000040)=0xe8) write$binfmt_misc(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00'], 0xffcf) close(r3) r4 = accept4(r2, 0x0, &(0x7f0000000080), 0x0) close(r4) close(r1) 04:25:11 executing program 5: mknod(&(0x7f0000000ffa)='./bus\x00', 0x1000, 0x0) r0 = open(&(0x7f000054a000)='./bus\x00', 0xb00, 0x0) ioctl$KVM_S390_UCAS_UNMAP(r0, 0x4018ae51, &(0x7f0000000300)={0x10001, 0x9, 0xfff}) socket$inet_udp(0x2, 0x2, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./bus\x00', &(0x7f00000005c0)='9p\x00', 0x1, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) getresuid(&(0x7f0000000400)=0x0, &(0x7f0000000440), &(0x7f0000000480)) getgroups(0x1, &(0x7f00000004c0)=[0xffffffffffffffff]) mount$fuseblk(&(0x7f0000000340)='/dev/loop0\x00', &(0x7f0000000380)='./bus\x00', &(0x7f00000003c0)='fuseblk\x00', 0x100000, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d, r1}, 0x2c, {'group_id', 0x3d, r2}, 0x2c, {[{@blksize={'blksize', 0x3d, 0xc00}, 0x2c}, {@default_permissions='default_permissions', 0x2c}]}}) r3 = open(&(0x7f0000000100)='./bus\x00', 0x41, 0x0) syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x6, 0x40) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10100080}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)=@gettaction={0x120, 0x32, 0x400, 0x70bd2c, 0x25dfdbff, {0x0, 0x9, 0xffffffffffffcac7}, [@action_gd=@TCA_ACT_TAB={0x8c, 0x1, [{0x14, 0x16, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x14, 0x1a, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0x14, @TCA_ACT_INDEX={0x8, 0x3, 0x4c}}, {0x10, 0x0, @TCA_ACT_INDEX={0x8, 0x3}}, {0x10, 0x17, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x3, @TCA_ACT_INDEX={0x8, 0x3, 0xa7}}, {0x10, 0x1a, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x38, 0x1, [{0x10, 0x1f, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0x14, 0x8, @TCA_ACT_KIND={0xc, 0x1, 'vlan\x00'}}, {0x10, 0xb, @TCA_ACT_INDEX={0x8, 0x3}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x15b}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}, @action_gd=@TCA_ACT_TAB={0x18, 0x1, [{0x14, 0x14, @TCA_ACT_KIND={0xc, 0x1, 'sample\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x2}]}, 0x120}, 0x1, 0x0, 0x0, 0x4000000}, 0x81) 04:25:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfec00000, @loopback={0x0, 0x1}}, 0x1c) 04:25:11 executing program 0: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x80045432, &(0x7f0000000040)) r1 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffff9) r2 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000140)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xfffffffffffffffe) keyctl$unlink(0x9, r1, r2) 04:25:11 executing program 3: r0 = gettid() exit(0x0) capget(&(0x7f0000000040)={0x19980330, r0}, &(0x7f00000010c0)) r1 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x3f, 0x181000) setsockopt$packet_buf(r1, 0x107, 0x1, &(0x7f0000000080)="ca539477c759f7de3c7ce113cfc242a303df6126d927bb0dc43b1ba66d011d4b9207077c3beb438ea3c8cdbe7847bf6ed3a6aa925520d4537da10e415ebfcc9ea8883920a4d853cab6f418b3ad629223cd4f1393bcceb5", 0x57) 04:25:11 executing program 1: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = memfd_create(&(0x7f00000000c0)='security.capability\x00', 0x0) fsetxattr(r1, &(0x7f0000000100)=@known='security.capability\x00', &(0x7f0000000040)='^#-*\x00', 0x0, 0x0) dup3(r0, r1, 0x0) 04:25:11 executing program 7: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendfile(r0, r0, &(0x7f0000000140)=0x4b, 0x401) sendfile(r0, r0, &(0x7f0000000080), 0x0) r1 = socket(0x1e, 0x1, 0x0) getsockopt(r1, 0x10f, 0x0, &(0x7f0000000040)=""/4, &(0x7f0000000100)=0x4) sendto$unix(r1, &(0x7f00000000c0)="7bc14cea6586be22d6c134d1257519190e9f2f13343c96b1c6866367acac21a6839f6b33111d4d71ab33338ad0d3e56ddcdcff88f4f9631d217d", 0x3a, 0x40800, 0x0, 0x0) flistxattr(r0, &(0x7f0000000200)=""/158, 0x9e) [ 169.824762] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 169.832221] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 169.839517] netlink: 'syz-executor7': attribute type 4 has an invalid length. [ 169.849389] netlink: 'syz-executor7': attribute type 1 has an invalid length. [ 169.856817] netlink: 'syz-executor7': attribute type 2 has an invalid length. [ 169.864120] netlink: 'syz-executor7': attribute type 4 has an invalid length. 04:25:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xcb000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:11 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x102d}, 0x48) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() read(r0, &(0x7f00000001c0)=""/136, 0x88) fchown(r0, r1, r2) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x105140, 0x0) getsockname$packet(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000080)=0x14) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="b400000000000000bd000200000000009f0000950000000000000000000000000000000000000000"], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0x3e9, &(0x7f000000cf3d)=""/195}, 0x48) 04:25:14 executing program 4: r0 = socket$inet6(0xa, 0x13, 0x5) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}, 0x9}, 0xffffffffffffff36) sendmsg(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000a80)="3a9a0e63c9476288b6", 0x9}], 0x1, &(0x7f00000001c0)}, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x1, 0xc4400) ioctl$TUNGETFEATURES(r1, 0x800454cf, &(0x7f0000000040)) rmdir(&(0x7f0000000080)='./file0\x00') 04:25:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:14 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0xf503}, 0xc, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000002700ffff0000000016e8ffff0700090000000000"], 0x1}, 0x1}, 0x0) 04:25:14 executing program 7: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/nat_icmp_send\x00', 0x2, 0x0) ioctl$KDGKBMETA(r1, 0x4b62, &(0x7f0000000140)) bind$bt_sco(r0, &(0x7f0000000040)={0x1f}, 0x8) mmap(&(0x7f0000000000/0xef9000)=nil, 0xef9000, 0x1000004, 0x32, 0xffffffffffffffff, 0x0) lsetxattr(&(0x7f0000000000)='./file0\x00', &(0x7f00000000c0)=@known='trusted.syz\x00', &(0x7f0000000100)='em1}\x00', 0x5, 0x1) 04:25:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe00, @loopback={0x0, 0x1}}, 0x1c) 04:25:14 executing program 0: socket$inet6(0xa, 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc\x00', 0x0, 0x0) preadv(r0, &(0x7f0000f85000)=[{&(0x7f000018bf12)=""/4, 0x4}], 0x1, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000ec5000)={0x0, 0x12}, &(0x7f00000004c0)) timer_settime(0x0, 0x0, &(0x7f0000000300)={{0x0, 0x8}, {0x0, 0x9}}, &(0x7f0000000040)) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x80006, 0x31, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f00000000c0)={0x8, 0x1, 0x3, 0x3, &(0x7f0000000080)=[{}]}) tkill(r1, 0x1000000000016) 04:25:14 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x60000, 0x0) ioctl$VHOST_VSOCK_SET_RUNNING(r1, 0x4004af61, &(0x7f0000000040)=0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x60000000) r2 = socket(0xa, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000780)=ANY=[@ANYBLOB="66696c746572000000000000000000000e000000040010000000000001ffffffc00000000000000000000000ffffffffa0fffffff8020000f8020000f8020000ffffffff04000000a29ef438735bf7bc0407b57b0d"], 0x1) 04:25:14 executing program 3: openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhost-vsock\x00', 0x2, 0x0) r0 = syz_open_dev$audion(&(0x7f0000000740)='/dev/audio#\x00', 0x9, 0x8d3f479f988b310b) getsockopt$inet_buf(r0, 0x0, 0x29, &(0x7f0000000780)=""/42, &(0x7f00000007c0)=0x2a) bpf$MAP_CREATE(0x0, &(0x7f0000001140)={0x7, 0x4, 0x10, 0xfffffffffffffffa, 0x0, 0xffffffffffffffff, 0x0, [0x18]}, 0x2c) 04:25:14 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d80)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000580)='\b', 0x1}], 0x1, &(0x7f0000000040)}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x10, &(0x7f0000000140), 0x4) sendmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000021c0)=[{&(0x7f00000020c0)="a2", 0x1}], 0x1}, 0x0) recvmsg(r0, &(0x7f00000004c0)={&(0x7f0000000300)=@hci, 0x80, &(0x7f0000001940)=[{&(0x7f00000005c0)=""/122, 0x7a}], 0x1, &(0x7f00000019c0)=""/154, 0x9a}, 0x0) 04:25:14 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000028c0)="b7f2288a", 0x4) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000140)=ANY=[@ANYBLOB="b36d7461a7e8fc59184dccf7f8fa340e8a742323eadc1b31b068dbd095b4f25ec858104dcda6f4b7c4869bc3c917734edbeb0e68e67dccdfbb24e0d62f6189e122b0084b41ad624ff3d06834325dea4d156075372a001354966c00000000002b730000000071d6d383252b138c7cfa60446df93c04dda768"], 0x70) recvmsg(r1, &(0x7f0000000640)={&(0x7f0000000000)=@nfc_llcp, 0x80, &(0x7f00000004c0)=[{&(0x7f00000003c0)=""/227, 0xfffffcf6}], 0x1, &(0x7f0000000540)=""/222, 0xde}, 0x0) 04:25:14 executing program 3: r0 = creat(&(0x7f0000000040)='./file0\x00', 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x80000, &(0x7f0000000140)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@version_9p2000='version=9p2000', 0x2c}]}}) pwritev(r0, &(0x7f00000014c0)=[{&(0x7f0000000480)="98", 0x1}], 0x1, 0x0) ioctl$KVM_IOEVENTFD(r0, 0x40086602, &(0x7f0000000080)={0x5804}) [ 172.782152] IPVS: ftp: loaded support on port[0] = 21 04:25:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8fbf4ac, @loopback={0x0, 0x1}}, 0x1c) 04:25:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(0xffffffffffffffff, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:14 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000346fd4)={0x0, 0x0, 0x0, 0x102c, 0xfffffffffffffffd}, 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000ba000)={0xa, 0x5, &(0x7f0000346fc8)=@framed={{0x18}, [@alu={0x8000000201a7f19, 0x0, 0x201a7fa6, 0x0, 0x1}], {0x95}}, &(0x7f0000f6bffb)='GPL\x00', 0x1, 0x3bc, &(0x7f00001a7f05)=""/251}, 0x2e) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000000)={0x6, 0x4, 0x1, 'queue1\x00', 0x1}) 04:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getsockopt(r0, 0x1, 0x1, &(0x7f0000000040)=""/170, &(0x7f0000000100)=0xaa) clock_getres(0x0, &(0x7f0000000000)) getsockopt$IP6T_SO_GET_REVISION_MATCH(r0, 0x29, 0x44, &(0x7f00000001c0)={'icmp6\x00'}, &(0x7f0000000200)=0x1e) [ 172.887631] IPVS: ftp: loaded support on port[0] = 21 04:25:14 executing program 7: r0 = socket$inet6(0xa, 0x2000020004000808, 0x9) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000080)) ioctl$KVM_ENABLE_CAP(r2, 0x4020ae46, &(0x7f0000000000)={0x0, 0x0, [0x0, 0xffff8000]}) close(r2) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x400000, 0x4) setsockopt$inet_sctp_SCTP_NODELAY(r3, 0x84, 0x3, &(0x7f0000000100)=0x2, 0x4) 04:25:14 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") sendmmsg(r0, &(0x7f00000063c0)=[{{&(0x7f00000001c0)=@in6={0xa, 0x4e22}, 0x80, &(0x7f00000003c0), 0xa, &(0x7f0000000480)=[{0x10, 0x1, 0x1}], 0x10}}], 0x1, 0x0) setsockopt$inet6_tcp_buf(r0, 0x6, 0x1f, &(0x7f00000000c0)="3a8fc4337640159b27cb5ea71aacdfe57ae7f7e5d1239b8415b7957c735c99ba17f50fda79a2b242f2faced0e605c5cc714c67c2ff39f655ecd6c9c1847195a7026eef6623d8501f36d56e47900527e25cd95671f804eecf531a84be553feab170a46b120d43463de9e1dec6d7d7400c1d74e43bc813855f2c001a56361dc61737759114f234034e5543e1ca4632e9904e8622d0a8", 0x95) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000380)="2f70726f632f7379732f6e65742f697076342f76732f73796e63df76e57273696f6e00", 0x2, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x1f, &(0x7f0000000300), &(0x7f0000000340)=0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000240)=0x2, 0x4) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280), &(0x7f00000002c0)=0x14) recvfrom$inet6(r0, &(0x7f0000000000)=""/23, 0x17, 0x40, &(0x7f0000000040)={0xa, 0x4e24, 0xfffffffffffffff7, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) pause() 04:25:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4002000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:14 executing program 5: r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r0, 0x10c, 0x5, &(0x7f0000000000)=0x40000000001d0, 0x4) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x1, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r1, 0x54a2) 04:25:14 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:14 executing program 0: r0 = memfd_create(&(0x7f0000000140)='md5sumbdev.vmnet1lo\x00', 0x0) pwrite64(r0, &(0x7f000003bfff)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) chroot(&(0x7f0000000000)='./file0/../file0\x00') chdir(&(0x7f0000000100)='./file0/../file0\x00') symlink(&(0x7f0000001000)='./file0\x00', &(0x7f0000000080)='./file0\x00') chroot(&(0x7f0000000040)='./file0/../file0/file0\x00') 04:25:14 executing program 1: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") clock_gettime(0x0, &(0x7f0000000200)={0x0}) r2 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x0, 0x200) ioctl$KDGKBMETA(r2, 0x4b62, &(0x7f0000000040)) futex(&(0x7f000000cffc), 0x0, 0x0, &(0x7f0000edfff0)={r1}, &(0x7f0000048000), 0x0) futex(&(0x7f000000cffc)=0x4, 0x0, 0x4, &(0x7f000000b000)={0x0, 0x1c9c380}, &(0x7f0000001040), 0x0) clone(0x0, &(0x7f0000000000), &(0x7f0000000140), &(0x7f0000000080), &(0x7f0000000000)) 04:25:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf4010000, @loopback={0x0, 0x1}}, 0x1c) 04:25:14 executing program 7: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000000), 0x297) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/vsock\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000100)={0x3, 0x4}) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x3, 0xf7, 0x2}) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000140)={@sco={0x1f, {0x7f, 0x5, 0x800, 0x6, 0x1, 0xdc9f}}, {&(0x7f0000000040)=""/34, 0x22}, &(0x7f0000000080), 0x62}, 0xa0) write$binfmt_script(r1, &(0x7f0000000200)={'#! ', './file0', [{0x20, '/dev/vsock\x00'}, {0x20, '{'}], 0xa, "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"}, 0x1019) ioctl$TCFLSH(r1, 0x540b, 0x9) ioctl$KVM_GET_DEBUGREGS(r1, 0x8080aea1, &(0x7f0000001240)) 04:25:14 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:14 executing program 5: r0 = syz_open_dev$loop(&(0x7f0000000280)='/dev/loop#\x00', 0x0, 0x105082) r1 = memfd_create(&(0x7f0000000140)="000000008c00000000000000000000", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000100)="a8", 0x1}], 0x1, 0x81003) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$int_in(r1, 0x5473, &(0x7f0000000000)=0x413d29d5) sendfile(r0, r1, &(0x7f00000ddff8)=0x40000, 0x102002f01) 04:25:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8055, @loopback={0x0, 0x1}}, 0x1c) 04:25:15 executing program 5: set_thread_area(&(0x7f0000000400)={0x2, 0x0, 0x1000, 0x8, 0x100000001, 0x5b93e736, 0x3, 0x100000000, 0x9, 0x4}) r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000580)={{{@in6=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in6=@remote}}, &(0x7f00000004c0)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000480)={'syz_tun\x00', r1}) r3 = openat$dsp(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/dsp\x00', 0x40000, 0x0) r4 = openat$full(0xffffffffffffff9c, &(0x7f0000000300)='/dev/full\x00', 0x82000, 0x0) rename(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') ioctl$VHOST_SET_VRING_ERR(r3, 0x4008af22, &(0x7f0000000340)={0x3, r4}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0xc) mount$9p_unix(&(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='.\x00', &(0x7f0000000200)='9p\x00', 0x40000, &(0x7f0000000380)=ANY=[@ANYBLOB='trans=unix,access=user,access=', @ANYRESDEC=r5, @ANYBLOB="2c756e616d653d2c64656275673d3088303030303030303030303050abe2ce773e5b966368653d667363616368652c6d6d61702c61636365733ac6aa0583e96e39c7e7bd2c00"]) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYBLOB="44000a0000000000000000000000000000000000ecf1e43efd9edfdaf3e9713897f6bba6824fa9312ac3d93ee3ec1d92506dfa78c9f3344be8833462", @ANYRES32=r2, @ANYBLOB="000000000000000024000e000000000000000000000000000000000000000000000000000000000000000000"], 0x44}, 0x1}, 0x0) connect$pptp(r4, &(0x7f0000000440)={0x18, 0x2, {0x1, @multicast1=0xe0000001}}, 0x1e) 04:25:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x0, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:15 executing program 7: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) ioctl$KVM_INTERRUPT(r0, 0x4004ae86, &(0x7f0000000140)=0xd96) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000300)='./cgroup\x00', 0x200002, 0x0) ioctl$BLKSECTGET(r0, 0x1267, &(0x7f0000000100)) r2 = openat$cgroup_int(r1, &(0x7f0000000080)='io.bfq.weight\x00', 0x2, 0x0) ioctl$BINDER_THREAD_EXIT(r0, 0x40046208, 0x0) r3 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendfile(r2, r2, &(0x7f0000000040), 0x1) 04:25:15 executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000040)={0x0, 0x88}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f00000000c0)={r3, 0x378b, 0x0, 0xfc}, &(0x7f0000000100)=0x10) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000140)={0xffffffffffffffff}, 0x13f, 0x8}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r1, &(0x7f00000001c0)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0xd901, @mcast2={0xff, 0x2, [], 0x1}, 0x3}, r5}}, 0x30) ioctl$sock_inet_SIOCGIFDSTADDR(r1, 0x8917, &(0x7f0000000200)={'irlan0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}) write$FUSE_NOTIFY_POLL(r1, &(0x7f0000000240)={0x18, 0x1, 0x0, {0x101}}, 0x18) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/loop-control\x00', 0x4100, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f00000002c0)={0x1, 0xffffffffffffff80, 0xc2, 'queue0\x00'}) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000380)={0x1, 0x8, 0x0, 0xfffffffffffffff9, 0x8001, 0x4, 0xbc6}, 0xc) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f00000003c0)={r4, @in={{0x2, 0x4e22, @rand_addr=0x6}}, 0xfffffffffffffffe, 0x4}, 0x90) r6 = add_key$keyring(&(0x7f0000000480)='keyring\x00', &(0x7f00000004c0)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$assume_authority(0x10, r6) listen(r2, 0xfe000) syz_mount_image$nfs4(&(0x7f0000000500)='nfs4\x00', &(0x7f0000000540)='./file0\x00', 0x5f27, 0x6, &(0x7f0000001840)=[{&(0x7f0000000580)="8043728a65ded70fea65d4249166b09881948b87af8c25ba7ed06f166998a9986678a46fd8a4fa1a8bb40aee2396db0243683c9b888f12da73da216b10dc770ad5d4b1d141b7aa400b8a5813476f54a94c5f81772467b4d89621efce0a45604850bc800a6d24f84a531a862946150ccf11f26531e98677ca16a71fbd9e2547ef059cbaf31d2bf1bf5851c7daac3ad890943165c82e80ee2aa11fc05eb1ab9e5702d87d23c9ea5e7dba", 0xa9, 0x2}, {&(0x7f0000000640)="5d560ab272496cac41cb7b3d6f1d040e58fec8fa4040e3413af1be6ef5782d6b4eed128a03146feac19ea293e6f96f1963dee295d4306e57d73e8a2b", 0x3c, 0x1f}, {&(0x7f0000000680)="abe0b9afa9cb2b61879ec5c0a196d12bf7b9b282e44f2461c79cced022f69babcd4ef8b2cfda05dc7dbbbecceb07d13eb86471090e29cb5ec9b1fceed01ab9ca217190df961975b02b51e2de7d", 0x4d, 0x7}, {&(0x7f0000000700)="86c2ab6e89d5d3e72279e86f294fa920aeb40c2d844f5448519def12bcc6d926d8a9fb3ddc66d38ed27f4bca5b8883e8c0d2c5662bd1fb083f4fb30dafe2ff9c33ce064ac4963467884234292a6540380724f0f54dd11ea3fd68261895d488c0749429cb91835ca28d829250b5696ab086eba5d05bda3f2f59b32211fbcec88fd4c31e3d9a253972c27bddb2319e3594c049aeb9826836deefa68d6714a5bcee011289d5f69ac0952aeb121aa11bb41f1cbf8f2bd41b6111aa4d322536483cc9e342f93fe2de570d08a1921c9c1b86706d5bd0459240440af2711ae9a56397b5ed83ba3a055090", 0xe7, 0x7}, {&(0x7f0000000800)="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", 0x1000, 0x1}, {&(0x7f0000001800)="a5e46136aeb859250413d4c13962280dc94e3a9bba6df5aa6f8c80d52ce6daa9789e9cefe013333f6effaa446cc835fd93223776245821a02bc730d0985499", 0x3f, 0xba1}], 0x800, &(0x7f0000001900)='\x00') ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000001940)={0x50, @tick=0x101, 0xffff, {0x7fff, 0xfff}, 0x1, 0x1, 0x100000000}) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000019c0), &(0x7f0000001a00)=0x4) r7 = openat$uinput(0xffffffffffffff9c, &(0x7f0000001a40)='/dev/uinput\x00', 0xc0, 0x0) r8 = syz_genetlink_get_family_id$ipvs(&(0x7f0000001ac0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DAEMON(r1, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x8422400}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x40, r8, 0x4, 0x70bd26, 0x25dfdbff, {0xa}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bond_slave_1\x00'}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @rand_addr=0x80000000}]}, @IPVS_CMD_ATTR_DAEMON={0x4, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$sock_inet_SIOCGIFDSTADDR(r7, 0x8917, &(0x7f0000001bc0)={'teql0\x00', {0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}}) ioctl$TIOCLINUX4(r0, 0x541c, &(0x7f0000001c00)=0x4) ioctl$sock_inet_SIOCSIFADDR(r7, 0x8916, &(0x7f0000001c40)={'syzkaller0\x00', {0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}) setsockopt$inet_sctp_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000001c80)=r4, 0x4) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000001cc0)={r3, 0x20}, 0x8) ioctl$sock_SIOCINQ(r7, 0x541b, &(0x7f0000001d00)) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000001d40)="1982c5baad20200ec8db7bf2f6ee70ed067978990817e4") getsockopt$IP_VS_SO_GET_SERVICES(r1, 0x0, 0x482, &(0x7f0000001d80)=""/104, &(0x7f0000001e00)=0x68) setsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000001e40)=@assoc_value={r4, 0xe023}, 0x8) [ 173.674005] Unknown ioctl 1074310931 [ 173.681461] Unknown ioctl 21515 [ 173.685301] Unknown ioctl -2139050335 [ 173.697466] Unknown ioctl 1074310931 [ 173.713906] Unknown ioctl 21515 [ 173.717745] Unknown ioctl -2139050335 [ 173.819908] QAT: Invalid ioctl [ 173.824823] QAT: Invalid ioctl [ 173.830157] QAT: Invalid ioctl [ 173.864146] QAT: Invalid ioctl [ 173.869803] QAT: Invalid ioctl [ 173.873725] QAT: Invalid ioctl 04:25:15 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300)='/dev/net/tun\x00', 0x6, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'vlan0\x00', 0x1001}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="2800000010005fba000000000000000000000000", @ANYRES32=0x0, @ANYBLOB="030000000000000008000000000000002d4495f47ad897010073d3d9801b23841b61e53cf0d7eb873e79eabbacc3b051dcbc6a493d766d77a91ab6000000000000000000aabf94bc7ad6b0e62e49e8d7614187c8c7044b02f994e30e61015831e88c56383f79c5c44a8727"], 0x28}, 0x1}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score_adj\x00') getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r2, 0x84, 0x20, &(0x7f0000000080), &(0x7f0000000240)=0x4) pwrite64(r0, &(0x7f00000001c0), 0x0, 0x2) 04:25:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff0f, @loopback={0x0, 0x1}}, 0x1c) 04:25:15 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:15 executing program 0: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000280)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f00000001c0)=""/31, &(0x7f0000000200)=0x1f) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000240)='/dev/uinput\x00', 0x200000, 0x0) getsockopt$inet_mreqn(0xffffffffffffff9c, 0x0, 0x0, &(0x7f00000002c0)={@multicast1, @remote, 0x0}, &(0x7f0000000300)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000340)={0x0, 0x0}, &(0x7f0000000380)=0xc) setsockopt$inet_IP_IPSEC_POLICY(r4, 0x0, 0x10, &(0x7f00000003c0)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast1=0xe0000001, 0x4e21, 0x0, 0x4e21, 0xffff, 0x0, 0x20, 0x20, 0x3b, r5, r6}, {0x4, 0x5, 0x2, 0x4, 0x6, 0x2, 0x0, 0x3}, {0x4, 0x2, 0x8000, 0x2}, 0x2d, 0x6e6bb7, 0x0, 0x0, 0x3}, {{@in, 0x4d4, 0xff}, 0xa, @in=@remote={0xac, 0x14, 0x14, 0xbb}, 0x34ff, 0x3, 0x2, 0x6, 0x14, 0x2, 0x81}}, 0xe8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x30, &(0x7f0000000000)=ANY=[], 0x0) ioctl$sock_SIOCGIFBR(r3, 0x8940, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='rose0\x00'}) ioctl$sock_inet6_SIOCSIFDSTADDR(r3, 0x89a1, &(0x7f0000000040)={@mcast1={0xff, 0x1, [], 0x1}}) close(r0) sync() r7 = open(&(0x7f0000000100)='./file0\x00', 0x440140, 0x100) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000000)='mime_type\x00', r7}, 0x10) 04:25:15 executing program 7: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000dc1000)="71e67a15", 0x4) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendto(r0, &(0x7f0000000240)="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", 0x1000, 0x24004000, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="417ca47fec6e02d9027dded178c82bf7d9f823", 0x13) io_setup(0x9, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, r1, &(0x7f0000000080)="1a48d885dc3b026875b9414340122575d6ec3bf7594ca9e95f584250bc2570835487a2fe612de91d1da60e62810593e5e1be64c1edd1914d14c304906b4177a88f23100997bce6a4aeda31371c6d4639726d1fc07a8a56448c4b8e20975fe89e6f0781d81d43b3981dff4bb4e46456eb72ad0ceb566828c412455cae3d09000000000000006f242e65d2b158c857bd0b66b0", 0x92}]) 04:25:15 executing program 3: r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c0e6ed88cf095bf8762cb0944300998c268ec19742b38fa00e440cae66124f5e016e750dab7af834efc178dafbf0741e0586d96977e63efbdabeca846d1a0cba9f163861c0f0630fb6c365d027af650f3c024930ad9788baefa7a6b36ad9270508749dbb84b3fc177f6ba075b0f25a27107971908799f2054ad846a26fa69aac1ddaaab0e945645e4c8935735afcc8427bd566343ee5cf7007dd7051f721b4c68a4db4859fb5488bbe468f3f9701cb58484cdecc34923ceaf2fbd350cbb4de11058fd577a51d", 0xc6) ioctl$sock_netdev_private(r0, 0x89f3, &(0x7f0000000100)="197f8df3c1b7451f1755108f85aa73bf640fcf81b2b65687138d0cbd6e4af76da42d5f19fcf5f1f28a5194f878fb1227a04e8e90d62e50155c7d408a50276266b08ca58064587976566db071cb0b67b1ba54aa24cc2469591e") ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000180)={'bridge0\x00', {0x2, 0x4e24, @multicast1=0xe0000001}}) readahead(r0, 0x7c5e, 0x6) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x400) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0x2) mq_timedreceive(r1, &(0x7f0000000280)=""/216, 0xd8, 0x400, &(0x7f0000000380)={0x77359400}) write$P9_RATTACH(r1, &(0x7f00000003c0)={0x14, 0x69, 0x1, {0x1}}, 0x14) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000400)='bbr\x00', 0x4) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000440)={@ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x5, 0x2, 0x3, 0xa, 0x7795, 0x2, 0x3994c153}, &(0x7f0000000480)=0x20) r2 = syz_open_dev$dmmidi(&(0x7f00000004c0)='/dev/dmmidi#\x00', 0x1, 0x400) setsockopt$IP_VS_SO_SET_DELDEST(r1, 0x0, 0x488, &(0x7f0000000500)={{0x8, @broadcast=0xffffffff, 0x4e22, 0x3, 'nq\x00', 0x0, 0x2, 0x4e}, {@local={0xac, 0x14, 0x14, 0xaa}, 0x4e20, 0x2000, 0x2, 0x5, 0x96}}, 0x44) connect$bt_sco(r1, &(0x7f0000000580)={0x1f, {0x6, 0x3ba240000000, 0xa0, 0x9, 0x7, 0x3}}, 0x8) pipe(&(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) finit_module(r3, &(0x7f0000000600)='\x00', 0x1) connect$llc(r1, &(0x7f0000000640)={0x1a, 0x30c, 0x5e08, 0xa2, 0x5, 0x3, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000680)) write$FUSE_DIRENT(r1, &(0x7f00000006c0)={0x158, 0xfffffffffffffffe, 0x5, [{0x5, 0x6, 0x7, 0x8, 'ppp0()\''}, {0x4, 0x100, 0x4, 0x0, 'bbr\x00'}, {0x1, 0x6, 0x1, 0xfc, '&'}, {0x0, 0x81, 0xb, 0x80000001, 'vmnet0eth0^'}, {0x1, 0x2, 0x10, 0x1, '/dev/input/mice\x00'}, {0x3, 0x4, 0x1, 0x3ff, '\x00'}, {0x0, 0x7fff, 0x8, 0x4, '\'wlan0]-'}, {0x0, 0x5, 0x0, 0x34dc}, {0x0, 0x3ff, 0x8, 0x3, 'bridge0\x00'}, {0x4, 0x800, 0x1, 0x8f, '\x00'}]}, 0x158) accept4$nfc_llcp(r3, &(0x7f0000000840), &(0x7f00000008c0)=0x60, 0x800) r4 = socket(0xa, 0x80001, 0x5) connect$llc(r4, &(0x7f0000000900)={0x1a, 0x0, 0x200, 0x0, 0x1ff, 0x6, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}}, 0x10) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000940)=0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000009c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000980)={0xffffffffffffffff}, 0x106}}, 0x20) write$RDMA_USER_CM_CMD_BIND_IP(r2, &(0x7f0000000a00)={0x2, 0x28, 0xfa00, {0x0, {0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}, 0x44f5}, r6}}, 0x30) r7 = syz_open_procfs(r5, &(0x7f0000000a40)='fdinfo\x00') write$cgroup_type(r7, &(0x7f0000000a80)='threaded\x00', 0x9) accept4$nfc_llcp(r2, &(0x7f0000000ac0), &(0x7f0000000b40)=0x60, 0x800) socket$inet_tcp(0x2, 0x1, 0x0) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f0000000b80)=r1) 04:25:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:16 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xbd02, @loopback={0x0, 0x1}}, 0x1c) 04:25:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000180)=ANY=[@ANYBLOB="a3de5013672f4a440d2e9d660e9c08556f1417eaf8"], &(0x7f0000000340)=0x1) socketpair(0x0, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_GET_DIRTY_LOG(0xffffffffffffffff, 0x4010ae42, &(0x7f0000000100)={0x2710, 0x0, &(0x7f0000003000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000280)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x0, 0x0, &(0x7f0000000040), 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000040)={0x0, 0x117000}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:25:16 executing program 7: perf_event_open(&(0x7f0000000200)={0x2000000000000002, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0xfffffffffffff001, 0x0, 0x7ec, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, @perf_config_ext, 0x200000000000}, 0x0, 0x2, 0xffffffffffffffff, 0x0) r0 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000040)={0x73, 0x79, 0x7a}, &(0x7f0000000080)="96", 0x1, 0xfffffffffffffffb) keyctl$describe(0x6, r0, &(0x7f0000000380)=""/200, 0xc8) socketpair(0x3, 0x2, 0x6, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PPPIOCSMRU(r2, 0x40047452, &(0x7f0000000100)=0x2) ioctl$KVM_PPC_GET_PVINFO(r1, 0x4080aea1, &(0x7f0000000280)=""/210) 04:25:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe, @loopback={0x0, 0x1}}, 0x1c) 04:25:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f000000a000)='/dev/snd/controlC#\x00', 0x0, 0x0) perf_event_open(&(0x7f0000001000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ce, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x40405515, &(0x7f0000001000)) r1 = fcntl$getown(r0, 0x9) capset(&(0x7f0000000000)={0xa2c25083769fe334, r1}, &(0x7f0000000040)={0x6, 0x2, 0x3, 0x1a7, 0x4, 0x3}) 04:25:16 executing program 7: r0 = socket$inet6(0xa, 0x80000, 0x8) ioctl(r0, 0x8912, &(0x7f0000000580)="207000000000000000000070fbf321214609bb71f69d7b04952347a602d7a243ead17fdb24b756851a584181fcf8acb310cec1f6926de6340a244b7fefc34a6622dbba33db32a970d6edda7ca56e081e5eafc5cbc5050000000000000080723112eb370c076ebbe69bf279eea8635cedcd2cc3554f97bce1322872032e579036486f6e2cecefced7be41f0ca391172431a9307fc3c937a22f6ff7f2627ab10c2642b05953bbda59592ba12a7bdd99aa50dd2cb97cd6144e043a3") r1 = perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6(0xa, 0x0, 0x8) r3 = syz_open_dev$dspn(&(0x7f00000003c0)='/dev/dsp#\x00', 0x7fff, 0x404) perf_event_open$cgroup(&(0x7f0000000340)={0x4, 0x70, 0x2, 0x0, 0x8, 0xb6b5, 0x0, 0xfffffffffffffff9, 0x49805, 0xa, 0x10000, 0x81, 0x6, 0x1, 0x2, 0x7ff, 0x0, 0x1, 0x8, 0x1, 0x80000001, 0x6, 0x1ff, 0x800, 0x2, 0x100000000, 0x100000000, 0x401, 0x400, 0x3, 0x0, 0x0, 0x2, 0x7f, 0x2, 0x6, 0x6, 0x1, 0x0, 0xc8, 0x2, @perf_bp={&(0x7f0000000100), 0x1}, 0x28c08, 0x6e6a, 0x9, 0x0, 0x5, 0x5, 0x6}, r3, 0x1, r1, 0x4) ioctl$sock_bt_hci(0xffffffffffffffff, 0x400448e6, &(0x7f00000001c0)="8804b91658346bbc93cdf33239b16d2b17966149bb239baabb4e1e67e350e71ff1661619d91b95bd255f8ebc2b732283ffaf66c357c7b3055245ca6d4d9364c2a393a6c7a6be963276937967467c9365ed2c8846dabe3e378fa24c207742308c6beeade3e30663432186665ae4e6a791ad61b168ed69ee28d357b37db313f796030304568fff2a635d76cae4294126658d9d58f441d8d8875e21691dd3c9489c9757134069ef6a490ff5c74d") setsockopt$inet_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x0, 0x2d, &(0x7f0000000280)={0x5, {{0x2, 0x4e22, @loopback=0x7f000001}}}, 0x88) ioctl$sock_proto_private(r2, 0x89e5, &(0x7f0000000400)="a3134700b14ac44d50ea1b45a662e9cc66b19b40673e5643829aaa3a2c05033622a6bef5fbb53263234171ffaa4d3899eed2c8a036fab2af0a43e7721577e0f28c7e04d14bf07446b9cc8ecb008382b3254bd28a527bdcded0070488831f37aa6506821989f4a7f71f39be20899f08222ebe3d149a1de79f440c60258ea910325dda148a839b39716e195b4084a3bd493bdc2c246d37f903b095fca21902fcf8284330dfec97566e414def592f5e269027") prctl$intptr(0x21, 0x1) 04:25:16 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mkdir(&(0x7f0000c92000)='./file0\x00', 0x0) socket$inet6(0xa, 0xb, 0x7) r1 = creat(&(0x7f0000f66ff4)='./file0/bus\x00', 0x0) writev(r1, &(0x7f00002c8000)=[{&(0x7f00007fbf5f)="b7", 0x1}], 0x1) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000040)={&(0x7f0000000000)='./file0/bus\x00', r1}, 0x10) munmap(&(0x7f0000000000/0xf000)=nil, 0xf000) r2 = dup(0xffffffffffffffff) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x2011, r2, 0x0) fchmod(0xffffffffffffffff, 0x14c) 04:25:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x503000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:16 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:16 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000580)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) r2 = open(&(0x7f00000001c0)='./file0\x00', 0x2100c0, 0x183) ioctl$SG_NEXT_CMD_LEN(r2, 0x2283, &(0x7f0000000200)=0xf7) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000000)={0x0, 0x3, 0x3, 0x0, '\x00', 0x6}) getsockopt$ARPT_SO_GET_REVISION_TARGET(r0, 0x0, 0x63, &(0x7f0000000040)={'icmp6\x00'}, &(0x7f0000000080)=0x1e) readv(r1, &(0x7f00000007c0)=[{&(0x7f0000000d80)=""/4096, 0x1000}], 0x1) r3 = accept4(r1, &(0x7f00000000c0)=@ax25, &(0x7f0000000140)=0x80, 0x800) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000180)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) 04:25:16 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000b00c23ba11b4c5b800009b009500f00000000000"], &(0x7f00000001c0)="73797a6b616c6c65720001be826e8f833152f795b4d9f4bc3ea582523aed371b084fccfc3d2ef2cbe65d30642ca8dcd0f8479be52e66937908f1d8112489e8099d9d4edb806d81189c0fbb6818d028546c35d3363d54db0db780f54977ae6359d617c1d233d8e18abfc75f9a76cd8e1f77583bc02f07a33de6f304e95db82fd4da55ebd25162df6f88e7d1bb0654ffb31e008967", 0x1, 0x99, &(0x7f000000d000)=""/153}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x18, &(0x7f0000000380)="0aac1ac22028d576e0e5504088ca", &(0x7f0000000000)=""/24, 0x800}, 0x28) 04:25:16 executing program 5: perf_event_open(&(0x7f000001d000)={0x200000002, 0x375, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) unshare(0x0) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000380)="6e6d8f3b2778bc732f75") perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x6, 0x108000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x4000000000006, 0xfffffffffffffffc) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r0 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x19, &(0x7f000074fffc)=0x3, 0x348) r1 = dup(r0) setsockopt$inet6_tcp_int(r1, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f0000000040)) sendto$unix(r1, &(0x7f0000000140), 0x0, 0x44010, &(0x7f00000002c0)=@abs, 0x6e) openat$autofs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/autofs\x00', 0x0, 0x0) setsockopt$inet6_MCAST_MSFILTER(0xffffffffffffffff, 0x29, 0x30, &(0x7f0000000640)=ANY=[], 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, &(0x7f0000000100)) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f00000002c0), 0x4) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}, 0x1c) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa}, 0x1c) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000080)) utimensat(0xffffffffffffffff, &(0x7f0000000580)='./bus/file0\x00', &(0x7f00000005c0)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000600)=0x808, 0x4) ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f00000000c0)) ioctl$EVIOCGSW(0xffffffffffffffff, 0x8040451b, &(0x7f00000001c0)=""/205) sendto$inet6(r0, &(0x7f0000000300), 0x0, 0x20004000, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) ftruncate(r2, 0x7fff) sendfile(r1, r2, &(0x7f0000000100), 0x8000fffffffe) [ 175.287095] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 04:25:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:17 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r2, 0x4068aea3, &(0x7f0000000040)={0x7b}) ioctl$KVM_SET_MSRS(r2, 0x4008ae89, &(0x7f00000000c0)={0x100002b3, 0x0, [{0x40000084}]}) 04:25:17 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:17 executing program 7: r0 = perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000100)='./file1\x00', 0x0, 0x1, &(0x7f0000000300)=[{&(0x7f0000010000)="8da4363a00000000000000000000000000000000000000000000000000000000ecf6f2a3299748aeb81e1b00920efd9a000001000000000001000000000000005f42485266535f4d", 0x48, 0x10000}], 0x1, &(0x7f0000000340)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f00000000c0)=0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000180)='net/dev\x00') kcmp$KCMP_EPOLL_TFD(r1, r2, 0x7, r0, &(0x7f00000001c0)={r3, r0, 0x6}) 04:25:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x300000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:17 executing program 0: r0 = geteuid() setfsuid(r0) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000180)={'filter\x00', 0x0, 0x4, 0x47, [], 0x4, &(0x7f00000000c0)=[{}, {}, {}, {}], &(0x7f0000000100)=""/71}, &(0x7f0000000280)=0x78) r2 = socket(0x18, 0x0, 0x1) accept4$inet6(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, @mcast2}, &(0x7f0000000040)=0x1c, 0x80000) socket$can_raw(0x1d, 0x3, 0x1) socket(0x7, 0x1, 0x7fffffff) connect(r2, &(0x7f0000000200)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @rand_addr}}}, 0x80) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) 04:25:17 executing program 5: r0 = epoll_create1(0x0) close(r0) ioctl$KVM_ASSIGN_SET_INTX_MASK(0xffffffffffffffff, 0x4040aea4, &(0x7f0000000000)={0xffffffffffffffff, 0x0, 0xfff}) readv(r0, &(0x7f0000000000), 0x1) 04:25:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:17 executing program 5: setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, &(0x7f0000000200), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x28}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000140), 0xc) r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$inet_icmp_raw(0x2, 0x3, 0x1, &(0x7f0000000180)) ustat(0x0, &(0x7f0000000240)) syz_mount_image$reiserfs(&(0x7f0000000080)='reiserfs\x00', &(0x7f00000000c0)='./file0\x00', 0x0, 0x0, &(0x7f00000001c0), 0x0, &(0x7f00000001c0)=ANY=[]) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") unshare(0x2000400) mount(&(0x7f0000000040)='./file0\x00', &(0x7f0000000380)='./file0\x00', &(0x7f0000000300)='cgroup2\x00', 0x0, 0x0) 04:25:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d34") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5000, @loopback={0x0, 0x1}}, 0x1c) [ 176.299164] BTRFS: device fsid ecf6f2a3-2997-48ae-b81e-1b00920efd9a devid 0 transid 0 /dev/loop7 04:25:17 executing program 0: r0 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x2, &(0x7f0000000000)=0x3, 0x8) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r0, 0x28, 0x6, &(0x7f0000000780)=0x4800000000000000, 0xfe04) 04:25:17 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = perf_event_open(&(0x7f000001d000)={0x2, 0x70, 0x0, 0x8001, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x400000000000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @perf_bp={&(0x7f0000001080)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000080)={0x0}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000380)={r3, @in6={{0xa, 0x4e23, 0x400, @remote={0xfe, 0x80, [], 0xbb}}}, 0x0, 0x7}, &(0x7f00000001c0)=0x90) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa}) readv(r2, &(0x7f0000000240)=[{&(0x7f00000002c0)=""/144, 0x90}], 0x1) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f000086c000)={{&(0x7f0000068000/0x800000)=nil, 0x800000}, 0x1}) setsockopt$XDP_UMEM_COMPLETION_RING(r2, 0x11b, 0x6, &(0x7f0000000000)=0x20, 0x4) ioctl$UFFDIO_UNREGISTER(r2, 0x8010aa01, &(0x7f0000c22ff0)={&(0x7f000001d000/0xc00000)=nil, 0xc00000}) r4 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000100)={0x5, 0x70, 0x1, 0x9, 0x0, 0xd2, 0x0, 0x1, 0x10000, 0x5, 0x800, 0x9, 0x9, 0xb6b, 0x81, 0x7, 0x8, 0x7, 0x8, 0x2, 0x9902, 0x1, 0x2, 0x6, 0x387, 0x1, 0x20a7, 0x7f, 0x8, 0x80000000, 0x7, 0xffffffffffffff8a, 0xb3d, 0x9, 0x9, 0x5, 0x4, 0x3, 0x0, 0x2f, 0x4, @perf_bp={&(0x7f0000000040)}, 0x400, 0x1, 0x1, 0x2, 0x6, 0x2, 0x6}, r4, 0x2, r1, 0xb) [ 176.353581] BTRFS error (device loop7): superblock checksum mismatch [ 176.391254] BTRFS error (device loop7): open_ctree failed [ 176.445775] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 04:25:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x91ffffff00000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:17 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:17 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f00000000c0)='/dev/dmmidi#\x00', 0x3, 0x48dcf1268b1f9f2b) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000200), &(0x7f0000000240)=0xb) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000100)={0x7, 0x5, 0x100}) mkdir(&(0x7f0000bebff8)='./file0\x00', 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000140)) keyctl$session_to_parent(0x12) ioctl$EVIOCGSW(r0, 0x8040451b, &(0x7f0000000280)=""/208) mount(&(0x7f000000a000)='./file0\x00', &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f0000000440)='./file0\x00', &(0x7f0000ab8000)='./file0\x00', &(0x7f00000d2ffa)='ramfs\x00', 0x24000, &(0x7f0000508fff)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={r0, 0x50, &(0x7f0000000380)}, 0x10) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='.', &(0x7f0000000080)='minix\x00', 0xa01402, &(0x7f00000000c0)) [ 176.497425] BTRFS error (device loop7): superblock checksum mismatch [ 176.530963] BTRFS error (device loop7): open_ctree failed [ 176.561170] REISERFS warning (device loop5): sh-2021 reiserfs_fill_super: can not find reiserfs on loop5 04:25:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:18 executing program 7: r0 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f0000000000)={[], 0x0, 0x0, 0x8001}) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) r1 = fcntl$getown(r0, 0x9) ioctl$BLKTRACESETUP(r0, 0xc0481273, &(0x7f00000000c0)={[], 0x8, 0x6, 0x3, 0x0, 0xfffffffffffffffc, r1}) fcntl$getown(r0, 0x9) 04:25:19 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:19 executing program 5: mknod$loop(&(0x7f0000000000)='./file0\x00', 0x0, 0xffffffffffffffff) getxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'system.', '\x00'}, &(0x7f0000000280)=""/4096, 0x1000) r0 = open(&(0x7f0000000080)='./file0\x00', 0x40002, 0x0) write$FUSE_DIRENT(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="df"], 0x1) sendfile(r0, r0, &(0x7f00000000c0), 0x2000fffffffd) r1 = open$dir(&(0x7f0000000100)='./file0\x00', 0x4002, 0x0) truncate(&(0x7f0000000240)='./file0\x00', 0x90002) userfaultfd(0x800) ioctl$SG_SCSI_RESET(r0, 0x2284, 0x0) sendfile(r1, r1, 0x0, 0x7fffff29) 04:25:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:19 executing program 0: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r1, 0xc0a85320, &(0x7f0000068f50)={{0x180}, 'port0\x00', 0x800000000000c7, 0x80003}) bind$rds(r0, &(0x7f0000000040)={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00004d1ff0)='/dev/sequencer2\x00', 0x1, 0x0) read(r1, &(0x7f00000001c0)=""/43, 0x2b) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") close(r2) 04:25:19 executing program 7: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x80201, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000140)={'filter\x00', 0x0, 0x3, 0x42, [], 0x7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], &(0x7f00000000c0)=""/66}, &(0x7f00000001c0)=0x78) r1 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_buf(r0, 0x107, 0x0, &(0x7f0000000200)="3c9fb8af72171e3d75dedb39988aa8a0176ce0d440ace9b85f636226b5b1520a4858340e9d106acbef63aa1a820b48fa62854cddd399670a36e6f27bacbc73990a4eeab5858a1a4451c089e3643e3ca5e10ff411c15ea59344eb7e3f3f40cde717aaf4fc416303ce81ca3084862ad52ec1bd76a8b20b44a1277aed247ec65118483905f45ef9c351e1bc4897a32e1533b2606dd183c4dc55c8ba22f08635bfd0c6e7e6935c74569d01d5a76a0b59b46dfd32c24d77", 0xb5) fdatasync(r1) ioctl$BLKPG(r0, 0x1269, &(0x7f00000003c0)={0x4, 0x0, 0xfc, &(0x7f00000002c0)="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"}) sigaltstack(&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000000400)) ioctl$KVM_CREATE_VCPU(r0, 0xae41, 0x2) getpeername(r1, &(0x7f0000000440)=@vsock={0x0, 0x0, 0x0, @reserved}, &(0x7f00000004c0)=0x80) setsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r0, 0x84, 0x7, &(0x7f0000000500)={0x5}, 0x4) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000540)='net/ip_vs\x00') ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, &(0x7f0000000580)) socket$packet(0x11, 0x3, 0x300) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000005c0), &(0x7f0000000600)=0x4) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r0, 0x10e, 0x8, &(0x7f0000000640)=0x3, 0x4) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r2, 0x810c5701, &(0x7f0000000680)) ioctl$KVM_GET_PIT(r2, 0xc048ae65, &(0x7f00000007c0)) syz_kvm_setup_cpu$x86(r0, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000880)=[@text64={0x40, &(0x7f0000000840)="66ba4100ecf2260f090faa0f011fb9d60b00000f32c4021546d066b83c010f00d0450f08470f380132c1650000", 0x2d}], 0x1, 0x2, &(0x7f00000008c0)=[@dstype3={0x7, 0x5}], 0x1) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, &(0x7f0000000900)='veth1\x00') ioctl$sock_SIOCGIFCONF(r2, 0x8910, &(0x7f00000009c0)=@req={0x28, &(0x7f0000000980)={'irlan0\x00', @ifru_data=&(0x7f0000000940)="0f31d32936518017589ba9c9488f4b4f6f328fdb430d5d0ec59ff84f285f1182"}}) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000a00)=""/231) connect(r2, &(0x7f0000000b00)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e20, @rand_addr=0x6}, 0x0, 0x4, 0x0, 0x2}}, 0x80) ioctl$LOOP_GET_STATUS(r0, 0x4c03, &(0x7f0000000b80)) write$binfmt_script(r0, &(0x7f0000000c40)={'#! ', './file0', [{0x20, 'filter\x00'}, {0x20, '/dev/rfkill\x00'}, {0x20, 'securityselinux+,'}, {0x20, '/dev/rfkill\x00'}, {0x20, 'lo'}, {0x20, 'net/ip_vs\x00'}, {0x20, 'veth1\x00'}, {0x20, 'irlan0\x00'}], 0xa, "47b030ba5f58e49d250deede4dbb0a4ad8110a5a8e4e79dccdea712f9508e062e31bb70db7d3b7f20bc01438992197920f942856396aa85290c3a7d91fc6255c7f90c337953ff6d5fdd2420bcfe6196a0801444218aba80fc595977406a757af74c894262e5bf7d09af31218e6e3e4901846963ac1442365240f3f70883bf11bdae382f2cd7593df258cdec00473a0d2b20ab8db1863663316fe1bda3fae9d4f28"}, 0xfd) setsockopt$inet6_MRT6_DEL_MFC(r2, 0x29, 0xcd, &(0x7f0000000d40)={{0xa, 0x4e24, 0x4, @dev={0xfe, 0x80, [], 0x1d}, 0x10001}, {0xa, 0x1f7, 0x6, @empty, 0x9}, 0x4df6, [0xff, 0xd6, 0x65e0, 0x3, 0x5, 0x4, 0x3, 0x4]}, 0x5c) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r2, 0xc008551a, &(0x7f0000000dc0)={0x9, 0x4, [0x100]}) getpeername$packet(r2, &(0x7f0000000e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000e40)=0x14) r4 = geteuid() setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000e80)={{{@in6=@remote={0xfe, 0x80, [], 0xbb}, @in=@multicast2=0xe0000002, 0x4e22, 0xfff, 0x4e22, 0x1, 0xa, 0xa0, 0xa0, 0x3b, r3, r4}, {0x3, 0x7ff, 0x200, 0x8000, 0x7f, 0xae, 0x2, 0xffffffff}, {0xb98, 0x1, 0x80000000, 0x3}, 0x1000, 0x6e6bb2, 0x1, 0x1, 0x2, 0x3}, {{@in, 0x4d4, 0x7e}, 0xa, @in=@broadcast=0xffffffff, 0x3504, 0x2, 0x3, 0x80000001, 0x6, 0x7fffffff}}, 0xe8) socket$inet6(0xa, 0x8000f, 0x3d) 04:25:19 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x9, 0x1) getuid() ioctl$EVIOCGPHYS(r1, 0x80404507, &(0x7f00000002c0)=""/98) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000100)=0xc) ioctl$TIOCLINUX5(r1, 0x541c, &(0x7f0000000140)={0x5, 0x4, 0xe545, 0x1a3, 0x21}) shutdown(r0, 0x0) ioctl$KVM_SET_BOOT_CPU_ID(r1, 0xae78, &(0x7f0000000080)) recvfrom(r0, &(0x7f0000000200)=""/105, 0x69, 0x40000000, &(0x7f0000000180)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e23, @multicast1=0xe0000001}, 0x3, 0x1, 0x4}}, 0xfffffffffffffea8) splice(r0, &(0x7f0000000040), r1, &(0x7f0000000340), 0x1, 0x3) 04:25:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f76") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:19 executing program 3: r0 = syz_open_dev$dspn(&(0x7f000000bff6)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000595ff8)=0x3) r1 = mmap$binder(&(0x7f00004be000/0x1000)=nil, 0x1000, 0x100000b, 0x52, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000180)={0x70, 0x0, &(0x7f00000000c0)=[@decrefs={0x40046307, 0x3}, @exit_looper={0x630d}, @reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x50, 0x8, &(0x7f0000000000)=[@flat={0x77682a85, 0x100, r1, 0x1}, @fda={0x66646185, 0x6, 0x3, 0x15}, @flat={0x0, 0xa, r1, 0x1}], &(0x7f0000000080)=[0x38]}}, @exit_looper={0x630d}, @increfs_done={0x40106308, r1, 0x2}, @acquire={0x40046305, 0x3}], 0x20, 0x0, &(0x7f0000000140)="a35b7afd3bde5997711e602682173fbd3efba3d441f593e60be90bc52024033b"}) writev(r0, &(0x7f0000001500)=[{&(0x7f00000011c0)="ec", 0x1}], 0x1) ioctl$BLKRRPART(r0, 0x125f, 0x0) close(r0) 04:25:19 executing program 7: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000010}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x34, r1, 0x10, 0x70bd2b, 0x25dfdbfe, {0x5}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000040) sendmsg$nl_generic(r0, &(0x7f0000018000)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000180)={0x14, 0x18, 0x1, 0x0, 0x0, {0x1}}, 0x14}, 0x1}, 0x0) 04:25:19 executing program 0: socketpair$inet6_udp(0xa, 0x2, 0x0, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'veth0_to_team\x00', 0x0}) sendto$packet(r0, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x11, 0x1, r1, 0x1, 0x0, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x14) getpid() r2 = getpgid(0xffffffffffffffff) ptrace$poke(0x5, r2, &(0x7f00000000c0), 0x4) 04:25:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xa00, @loopback={0x0, 0x1}}, 0x1c) 04:25:19 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:20 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:20 executing program 7: openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x200000, 0xc17bfd68f402f880) connect$vsock_dgram(r0, &(0x7f0000000100)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}, @in={0x2, 0x2, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x2e, 0x119, 0x0, 0x0, {0x2}, [@nested={0xc, 0x0, [@typed={0x8, 0x1, @binary="04"}]}]}, 0x20}, 0x1}, 0x0) 04:25:20 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 178.757831] openvswitch: netlink: Key type 512 is out of range max 29 [ 178.769892] openvswitch: netlink: Key type 512 is out of range max 29 04:25:20 executing program 0: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$nfc_llcp(r0, &(0x7f0000000000)={0x27, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffffd, "6cb782e4ad88b89d1fd309169f44a72107130ee55d660510420aaa96759ecbc36eb9bb12b6124793608dd0e7316d1d4f4dbac39877e4ac714b7ecefa8a934a", 0xfffffffffffffffd}, 0x60) 04:25:20 executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x2000, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000100)={'veth0\x00', 0x7}) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r2 = socket$inet_dccp(0x2, 0x6, 0x0) fsetxattr(r1, &(0x7f00000000c0)=@random={'system.', '/dev/zero\x00'}, &(0x7f0000000140)="b4656d3173656c666d696d655f7479706500", 0x12, 0x2) getsockopt$inet_int(r2, 0x10d, 0xc, &(0x7f000079bffc), &(0x7f0000000000)=0x4) 04:25:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff00, @loopback={0x0, 0x1}}, 0x1c) 04:25:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:20 executing program 7: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) mmap$binder(&(0x7f0000fed000/0x13000)=nil, 0x13000, 0x0, 0x13, r0, 0xfffffffffffffffe) pipe2$9p(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) readahead(r1, 0x7, 0x10c1) 04:25:20 executing program 5: r0 = socket$inet(0x11, 0x40000000000803, 0x0) recvmsg(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)=@pptp={0x0, 0x0, {0x0, @local}}, 0x80, &(0x7f00000007c0)}, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x107, 0xf, &(0x7f00000001c0)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000100], 0x0, &(0x7f0000000040), &(0x7f0000000100)=ANY=[@ANYBLOB="0000d52d0009000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"]}, 0x108) r1 = syz_open_dev$vcsa(&(0x7f0000000440)='/dev/vcsa#\x00', 0xfffffffffffffffa, 0x212002) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f00000004c0)={0x400, 0x7fff, 0x6}) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)=""/228, 0xe4}, {&(0x7f0000000200)=""/201, 0xffffffffffffffcd}], 0x109, &(0x7f0000000540)=""/34, 0x2f9}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000540), 0x0, &(0x7f0000003000)=""/4096, 0x1000}, 0x0) sendmsg(r0, &(0x7f000087dfc8)={&(0x7f000005e000)=@nfc_llcp={0x27, 0x9, 0x0, 0x0, 0x0, 0x0, "f0aeec0d840130e5c5485e44a7627f9a8864abed4d4460dd5b1a0182c6c84a143e64f31d1c11349c949054860b9c131950a610e2736612827582530c3c1df9"}, 0x60, &(0x7f0000000380), 0x9c}, 0x0) 04:25:20 executing program 3: r0 = syz_open_dev$binder(&(0x7f0000d59ff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap$binder(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x11, r0, 0x0) r1 = syz_open_dev$binder(&(0x7f0000000100)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x20011, r1, 0x0) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000080)=0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000200)=0x858b) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000440)={0x19, 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="00634040000000000000000000000000000000000000000010"], 0x0, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000040)={0x4, 0x0, &(0x7f0000000000)=[@register_looper={0x630b}], 0x1, 0x0, &(0x7f0000000140)="06"}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000001c0)={0x44, 0x0, &(0x7f0000000280)=[@reply={0x40406301, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38, 0x8, &(0x7f00000000c0)=[@fda={0x66646185}, @fd={0x66642a85}], &(0x7f0000000180)=[0x20]}}], 0x0, 0x0, &(0x7f0000000500)}) 04:25:20 executing program 7: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaa8aaaaaaaaaaaa0104000000000000000000002f90dbf862ccb95efdfa951414bbac14ef12ffff00000401010400e5704400cd98e8"], &(0x7f0000000100)={0x0, 0x8000, [0x0, 0xffffffffffffffff]}) 04:25:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4, @loopback={0x0, 0x1}}, 0x1c) 04:25:20 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") syz_mount_image$reiserfs(&(0x7f0000000000)='reiserfs\x00', &(0x7f0000000100)='./file0\x00', 0x400000000000000, 0x1, &(0x7f0000000200)=[{&(0x7f0000000240)="00080000ec0500006d8a2b001200040008090000b90200000001000084811f4ce10000001e000000000000000010ec0302e5fb00526549734572334673", 0x3d, 0x10000}], 0x0, &(0x7f0000013900)) r1 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uinput\x00', 0x200800, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140)='IPVS\x00') fcntl$addseals(r0, 0x409, 0x4) sendmsg$IPVS_CMD_ZERO(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80004000}, 0xc, &(0x7f0000000180)={&(0x7f0000000280)={0xe4, r2, 0x100, 0x70bd2b, 0x25dfdbfd, {0x10}, [@IPVS_CMD_ATTR_DAEMON={0x50, 0x3, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6gre0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast=0xffffffff}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x4}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e23}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, [@IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x64, 0x2, [@IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x100}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x3d}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0x2}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e22}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x100000000}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@multicast2=0xe0000002}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0xed11}]}, 0xe4}, 0x1, 0x0, 0x0, 0x4010}, 0x48801) 04:25:20 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f7620") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:20 executing program 5: r0 = socket$netlink(0x10, 0x3, 0xf) getpeername$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0xc0000, 0x0) bind$rds(r1, &(0x7f00000000c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x13}}, 0x10) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000100)={'veth1_to_bond\x00', {0x2, 0x4e22, @local={0xac, 0x14, 0x14, 0xaa}}}) fcntl$setflags(r1, 0x2, 0x1) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x100, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x0, 0x1000}, 0x4) ioctl$KVM_GET_VCPU_MMAP_SIZE(r1, 0xae04) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r1, 0x4010ae74, &(0x7f00000001c0)={0x3ff, 0x8001, 0x9}) r3 = gettid() sendmsg$nl_generic(r1, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x300000}, 0xc, &(0x7f0000000400)={&(0x7f0000000240)={0x1b8, 0x37, 0x200, 0x70bd2d, 0x25dfdbfc, {0x1e}, [@generic="1081537256cd2c1c401b9ba36705f38d3599a4c540ef09e6", @nested={0xc, 0x19, [@typed={0x8, 0x43, @pid=r3}]}, @generic="8d36cf96c0845d80c04466587298b81fbd0029059e1e9c891df5066c290304708da7323f8e039e2d87f1e4ffa9905c8991473f7e1e2644b98c57ef85bddf303e230fc9d6c8361d42ecd332c4ac19afc8a938df77524e74392ad3cbd28414ce8c324727f3a14abd99281df66f74e9efa2ad985577b9c989e3cd8a7d4299d381aff318b6744646197fcceacb3a", @generic="61a3f57f9c1b16137ca4d877ede184b0a8c8b4cecad23b1f336cc52781a9be4ad850e92a9aaac430caa21078cd96c11b824a52b0514229e21bb0548d4f46729aecab3cc90a0c7c2615837d2de026be318dbefa06b065c77cf0c859bb7f0ad2391e0b5a5c3e62e5e419fe68c9a378af722cfd1aaebe59cd370ff3a273223611bf6ae4b1786be6ee15c2be46417810d9d5a3a744583cb23e2c1d3519f074d15c7c620692585256e73ca1177a51423e8bd0dc8a2b60ef6561087c12e010ca28c8eb3dab7dc72e1dfabd8aa11a4efa36838a31337510b093d3ecefdefd74416943dba9735668ffad9f6903be93090bf44d94089843"]}, 0x1b8}, 0x1}, 0x4008005) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000480)={0x7, 0x8004, 0x0, 0x7, 0x0}, &(0x7f00000004c0)=0x10) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r4, 0x888}, 0x8) ioctl$HDIO_GETGEO(r1, 0x301, &(0x7f0000000540)) setsockopt$inet_int(r1, 0x0, 0x3, &(0x7f0000000580)=0x2ad7, 0x4) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f00000005c0)=0xffffffffffffffff, 0x4) ioctl$KVM_IRQ_LINE(r1, 0x4008ae61, &(0x7f0000000600)={0xdd, 0x50}) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000640)={0xffffffffffffffa4, 0x40}) geteuid() bind$pptp(r2, &(0x7f0000000680)={0x18, 0x2, {0x3, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x1e) getpeername$unix(r1, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) ioctl$sock_inet6_tcp_SIOCATMARK(r1, 0x8905, &(0x7f0000000780)) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000800)={0x0, 0x18, 0xfa00, {0x3, &(0x7f00000007c0)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000840)={0xf, 0x8, 0xfa00, {r5, 0xd}}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000880)='IPVS\x00') fremovexattr(r1, &(0x7f00000008c0)=@known='trusted.syz\x00') getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000900)={r4, 0x40000000000000}, &(0x7f0000000940)=0x8) modify_ldt$write(0x1, &(0x7f0000000980)={0x1, 0xffffffffffffffff, 0x1000, 0x3f, 0xfff, 0x0, 0x7ff, 0x6, 0xff, 0x4}, 0x10) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000009c0)='tunl0\x00', 0x10) 04:25:20 executing program 7: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x40102, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c06, r0) readv(r0, &(0x7f0000459000)=[{&(0x7f0000fd5fc3)=""/61, 0x1b}], 0x1) [ 179.050847] binder: 10712:10717 ERROR: BC_REGISTER_LOOPER called without request [ 179.059193] binder: 10712:10717 got transaction with invalid fd, -1 [ 179.066271] binder: 10712:10717 transaction failed 29201/-9, size 56-8 line 3072 [ 179.073975] binder: send failed reply for transaction 5 to 10712:10717 [ 179.092197] binder: BINDER_SET_CONTEXT_MGR already set [ 179.098677] binder: 10712:10722 ioctl 40046207 0 returned -16 [ 179.106858] binder: 10712:10722 ERROR: BC_REGISTER_LOOPER called without request [ 179.107450] binder_alloc: 10712: binder_alloc_buf, no vma [ 179.120063] binder: 10712:10717 transaction failed 29189/-3, size 0-0 line 2967 [ 179.145485] binder: undelivered TRANSACTION_COMPLETE [ 179.150682] binder: undelivered TRANSACTION_ERROR: 29201 [ 179.181478] binder: undelivered TRANSACTION_ERROR: 29189 [ 179.187516] binder: undelivered TRANSACTION_ERROR: 29190 [ 179.246443] Unknown ioctl 19462 [ 179.252690] Unknown ioctl 19462 04:25:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x200000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = open(&(0x7f0000000100)='./file1\x00', 0x0, 0x9) creat(&(0x7f0000000040)='./file1\x00', 0x6) fcntl$setlease(r1, 0x400, 0x0) rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 04:25:21 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(rfc4106(gcm_base(ctr(aes-aesni),ghash-generic)))\x00'}, 0x58) r1 = syz_open_dev$midi(&(0x7f0000000000)='/dev/midi#\x00', 0x97f, 0x20000) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000040)) close(r0) 04:25:21 executing program 3: r0 = socket$inet6(0xa, 0x5008000000005, 0x7fffffff) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0xc000, 0x0) ioctl$PIO_FONTX(r1, 0x4b6c, &(0x7f0000000040)="8a72b0d8b03deffc121f4d162292b6102d6e482aa90ab72decba650e8aa464c86e32e68471ccddb0be6220f7d88487189bf7c0c856d207bae59276e71b09abee34615407860e1ebc159a9cbc49a02111b848d0b1010f91a5e7e3b34de5a0c45c7fb3e18cf959a04174386e5d58afff7fe2e6e85f8b944aa759a85dec327c40124a165eb47b1d158accc3b3eaf5988124c6d7e4bd86d84e14c022b507f139bb66181284fce5892db0b69b72e1ae7b8a665a1da6ba64a81799f6b63048e1526402b74e0f9f6ae2fb80fe8b862926650309ab74f6f154a424e9002edb3897dc8086870f8e83ee89fb6652ecfb0a53") ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$binder(&(0x7f00000002c0)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) socketpair$inet(0x2, 0x80806, 0x20, &(0x7f0000000200)) ioctl$IOC_PR_REGISTER(r1, 0x401870c8, &(0x7f00000001c0)) setsockopt$packet_buf(r1, 0x107, 0x1f, &(0x7f0000000140)="e6c578bbe3a88cc81ec48b1d8fa35ef8ca16e8c8385c3e4895316a03b1825525db0308b9b9ae95fb840b4091fcf4c4e552f959f275db24c45c189e4d2a4ba7430910d34a8e8b11d3f61da490f6bfcd85565cd4b1c42170652c29839caac09879fd", 0x61) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x58, 0x0, &(0x7f0000000300)=[@acquire_done={0x40106309}, @transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000180), &(0x7f00000001c0)}}], 0x0, 0x0, &(0x7f0000000380)}) 04:25:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:21 executing program 7: r0 = socket$kcm(0x11, 0x3, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0x20000, 0x0) getpeername$unix(r1, &(0x7f00000001c0)=@abs, &(0x7f0000000240)=0x6e) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$EVIOCGLED(r2, 0x80404519, &(0x7f0000000100)=""/99) sendmsg$kcm(r0, &(0x7f0000001540)={&(0x7f0000000080)=@nfc={0x27, 0x3}, 0x80, &(0x7f0000000000), 0x0, 0x0, 0x223}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000040)={r0}) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000280)=0x4) 04:25:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xecb8fdff, @loopback={0x0, 0x1}}, 0x1c) 04:25:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:21 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:21 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x0) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000003fe8)={0xaa}) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$KVM_PPC_GET_PVINFO(r2, 0x4080aea1, &(0x7f0000000040)=""/254) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000180)={r2, 0x28, &(0x7f0000000140)}, 0x10) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000001fe2)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000013e95), 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x19, &(0x7f0000000200), 0x8) close(r3) close(r1) 04:25:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8000000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:21 executing program 0: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20000003) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x10000, 0x0) getsockopt$inet_sctp_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r2, 0x1, 0x1, &(0x7f0000000100)={0x5}, 0x4) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) [ 180.346702] binder: 10759:10768 BC_ACQUIRE_DONE node 8 has no pending acquire request [ 180.360868] binder: 10759:10768 got transaction to context manager from process owning it [ 180.369276] binder: 10759:10768 transaction failed 29201/-22, size 0-0 line 2843 [ 180.388089] binder: BINDER_SET_CONTEXT_MGR already set 04:25:21 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(rmd128-generic)\x00'}, 0x58) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x6, 0x0) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000040)="f08ed1ff1e58dc32") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000002c0)="64eb5d2482355153e1dbbf0a3423bb0b4330cea3670c67f976bc090000009e2fbc42cd1df37341a1441e731e7794fb559418e709891261a7d6c854a9fb09b7ba015f812964cbe0d1c58495dc8634f13287fffbee6b4a6d555148ecf71ba6e3e1fd2f428dc1492b3c4a6b50eb1af7e796159d96b707b83e71", 0x78) [ 180.399758] binder: 10759:10768 ioctl 40046207 0 returned -16 [ 180.413169] binder: 10759:10768 BC_ACQUIRE_DONE u0000000000000000 no match [ 180.413386] binder: undelivered TRANSACTION_ERROR: 29201 [ 180.420343] binder: 10759:10768 transaction failed 29189/-22, size 0-0 line 2852 [ 180.433732] binder: undelivered TRANSACTION_ERROR: 29189 04:25:21 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x0, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:21 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_int(r0, 0x6, 0x10, &(0x7f0000000140), &(0x7f0000000180)=0x4) r1 = socket$alg(0x26, 0x5, 0x0) r2 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x8, 0x400000) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240)='IPVS\x00') sendmsg$IPVS_CMD_SET_SERVICE(r2, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r3, 0x0, 0x70bd2b, 0x25dfdbff, {0x2}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x7}, @IPVS_CMD_ATTR_SERVICE={0x54, 0x1, [@IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x4}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local={0xfe, 0x80, [], 0xaa}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x553c7c65c6be2d09, 0x10}}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@loopback={0x0, 0x1}}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x18, 0x8}}]}]}, 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x4) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000000c0)=0x0) syz_open_procfs(r4, &(0x7f0000000100)='net/ip_vs_stats_percpu\x00') r5 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0xac, 0x0) ioctl$RTC_IRQP_READ(r2, 0x8008700b, &(0x7f00000003c0)) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(r5, 0x84, 0x6e, &(0x7f0000000080)=[@in6={0xa, 0x953, 0x6, @loopback={0x0, 0x1}, 0x61}], 0x1c) bind$alg(r1, &(0x7f000016b000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) 04:25:21 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$evdev(&(0x7f0000000300)='/dev/input/event#\x00', 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0x1bae}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000140)={{{@in6, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) getresgid(&(0x7f00000000c0)=0x0, &(0x7f0000000240), &(0x7f00000002c0)) fchown(r1, r2, r3) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 04:25:22 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:22 executing program 0: shmctl$IPC_SET(0x0, 0x1, &(0x7f0000000440)={{}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}) pipe(&(0x7f0000000000)={0xffffffffffffffff}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000080), &(0x7f00000000c0)=0xc) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='io.stat\x00', 0x0, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/33, 0x21}], 0x37d, 0x0) 04:25:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x2002012, r1, 0x0) 04:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x862605f0, @loopback={0x0, 0x1}}, 0x1c) 04:25:23 executing program 3: timer_create(0x7, &(0x7f0000000040)={0x0, 0x2b, 0x4}, &(0x7f0000000140)=0x0) timer_delete(r0) rt_sigprocmask(0x0, &(0x7f0000039ff8)={0xfffffffffffffffa}, 0x0, 0x8) r1 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x8, 0x4, @tid=r1}, &(0x7f0000044000)) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1}, {0x0, 0xe4c}}, &(0x7f0000040000)) rt_sigtimedwait(&(0x7f00000000c0)={0x27fffffff}, &(0x7f0000000000), &(0x7f0000000100)={0x77359400}, 0x8) 04:25:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x40000, 0x0) setsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f0000000080), 0x4) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r0, 0xc1105518, &(0x7f0000000200)={{0x0, 0x0, 0x0, 0x0, "651bbbdd5e645924ee488149de51870af804bdc6a833140579f967812973f83c5c825ad755ed2f513cda293a"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8cdffd71090892da0704727247f69ac3a7057f19e0c3573605e0ea23dd246fb9a61056e81c52f86c16a19ed66d0aa38b61122c4258a2dda7ff0f01fd5b100e54", &(0x7f0000000080), 0x13}) 04:25:23 executing program 0: perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f000031f000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) getgid() r0 = getpgid(0x0) r1 = socket(0x11, 0x0, 0xffffffffffffff51) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000000)={0x10000, 0x7e, 0x9, 0x1}, 0x10) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/sys/net/ipv4/vs/expire_quiescent_template\x00', 0x2, 0x0) ioctl$VHOST_RESET_OWNER(r2, 0xaf02, 0x0) r3 = getpid() getsockopt$inet_mreqsrc(r1, 0x0, 0x28, &(0x7f0000000040)={@dev, @rand_addr, @multicast1}, &(0x7f0000000080)=0xc) kcmp$KCMP_EPOLL_TFD(r0, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000100)) 04:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x900, @loopback={0x0, 0x1}}, 0x1c) 04:25:23 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x0, r1, 0x0) 04:25:23 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r0, &(0x7f0000000040)=""/173, 0xad) sendmsg$nl_netfilter(r0, &(0x7f0000d65000)={&(0x7f0000de2ff4)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000000301ffff0000b0db0000000000000000"], 0x14}, 0x1}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000100)='/dev/full\x00', 0x400000, 0x0) ioctl$KDSKBMETA(r1, 0x4b63, &(0x7f0000000180)) 04:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x6, @loopback={0x0, 0x1}}, 0x1c) 04:25:23 executing program 5: perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x200000a, 0x10, 0xffffffffffffffff, 0x0) syz_read_part_table(0x98d, 0x1, &(0x7f0000000200)=[{&(0x7f0000000000)="0200eeffffff01000000ff0700000000000000000000000000000000000000000000000000000000000000002502817d8dda4b9e0000000000000000000055aa", 0x40, 0x1c0}]) 04:25:23 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, 0xffffffffffffffff, 0x0) 04:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfe800000, @loopback={0x0, 0x1}}, 0x1c) [ 182.102763] Dev loop5: unable to read RDB block 4 [ 182.107898] loop5: unable to read partition table [ 182.113206] loop5: partition table beyond EOD, truncated [ 182.119051] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) 04:25:23 executing program 2 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:23 executing program 5: r0 = semget$private(0x0, 0xfffffffffffffffe, 0x0) semctl$SEM_STAT(r0, 0x0, 0x12, &(0x7f0000000380)=""/4096) [ 182.144098] Dev loop5: unable to read RDB block 4 [ 182.149138] loop5: unable to read partition table [ 182.165821] loop5: partition table beyond EOD, truncated [ 182.171378] loop_reread_partitions: partition scan of loop5 () failed (rc=-5) [ 182.230652] FAULT_INJECTION: forcing a failure. [ 182.230652] name failslab, interval 1, probability 0, space 0, times 0 [ 182.242203] CPU: 0 PID: 10905 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 182.250697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.260040] Call Trace: [ 182.262621] dump_stack+0x1c9/0x2b4 [ 182.266233] ? dump_stack_print_info.cold.2+0x52/0x52 [ 182.271407] ? xas_descend+0x20c/0x5f0 [ 182.275284] should_fail.cold.4+0xa/0x11 [ 182.279346] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 182.284437] ? alloc_set_pte+0xaf6/0x1790 [ 182.288583] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 182.293589] ? filemap_map_pages+0xca2/0x1990 [ 182.298070] ? trace_hardirqs_on+0x10/0x10 [ 182.302302] ? xa_set_tag+0x40/0x40 [ 182.305927] ? lock_acquire+0x1e4/0x540 [ 182.309898] ? fs_reclaim_acquire+0x20/0x20 [ 182.314228] ? lock_downgrade+0x8f0/0x8f0 [ 182.318380] ? check_same_owner+0x340/0x340 [ 182.322688] ? rcu_note_context_switch+0x730/0x730 [ 182.327616] __should_failslab+0x124/0x180 [ 182.331844] should_failslab+0x9/0x14 [ 182.335637] kmem_cache_alloc+0x2af/0x760 [ 182.339770] ? copy_vma+0xe10/0xe10 [ 182.343385] ? do_raw_spin_lock+0xc1/0x200 [ 182.347605] __split_vma+0x115/0x7f0 [ 182.351307] ? find_vma_prev+0x140/0x140 [ 182.355364] ? vmacache_update+0x10e/0x140 [ 182.359582] ? find_vma+0x34/0x190 [ 182.363117] do_munmap+0x2fe/0xf90 [ 182.366650] mmap_region+0x79b/0x1da0 [ 182.370448] ? __x64_sys_brk+0x7a0/0x7a0 [ 182.374505] ? lock_release+0xa30/0xa30 [ 182.378479] ? check_same_owner+0x340/0x340 [ 182.382813] ? __check_object_size+0xa3/0x5d7 [ 182.387297] ? lock_acquire+0x1e4/0x540 [ 182.391255] ? get_pid_task+0xd8/0x1a0 [ 182.395123] ? mpx_unmapped_area_check+0xd8/0x108 [ 182.399959] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 182.405415] ? arch_get_unmapped_area+0x770/0x770 [ 182.410245] ? lock_acquire+0x1e4/0x540 [ 182.414217] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 182.419221] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 182.424747] ? can_do_mlock+0x10a/0x160 [ 182.428709] ? can_do_mlock.part.10+0x20/0x20 [ 182.433192] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 182.438719] ? get_unmapped_area+0x292/0x3b0 [ 182.443110] do_mmap+0xa10/0x1220 [ 182.446544] ? mmap_region+0x1da0/0x1da0 [ 182.450585] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 182.454635] ? down_read_killable+0x200/0x200 [ 182.459115] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 182.464638] ? security_mmap_file+0x166/0x1b0 [ 182.469126] vm_mmap_pgoff+0x213/0x2c0 [ 182.473016] ? vma_is_stack_for_current+0xd0/0xd0 [ 182.477866] ksys_mmap_pgoff+0x4da/0x660 [ 182.481914] ? find_mergeable_anon_vma+0xd0/0xd0 [ 182.486653] ? __ia32_sys_read+0xb0/0xb0 [ 182.490705] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 182.496233] __x64_sys_mmap+0xe9/0x1b0 [ 182.500110] do_syscall_64+0x1b9/0x820 [ 182.504084] ? finish_task_switch+0x1d3/0x870 [ 182.508590] ? syscall_return_slowpath+0x5e0/0x5e0 [ 182.513513] ? syscall_return_slowpath+0x31d/0x5e0 [ 182.518436] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 182.523440] ? prepare_exit_to_usermode+0x291/0x3b0 [ 182.528527] ? perf_trace_sys_enter+0xb10/0xb10 [ 182.533187] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 182.538022] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 182.543210] RIP: 0033:0x455ab9 [ 182.546389] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 182.565583] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 182.573291] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 04:25:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4800, @loopback={0x0, 0x1}}, 0x1c) [ 182.580648] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 [ 182.587910] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 182.595168] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 182.602438] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000000 04:25:24 executing program 3: r0 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x401, 0x10200) ioctl$SNDRV_RAWMIDI_IOCTL_INFO(r0, 0x810c5701, &(0x7f0000000240)) ioctl$KVM_GET_NR_MMU_PAGES(r0, 0xae45, 0xc79) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) fstatfs(r1, &(0x7f0000000180)=""/137) 04:25:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:24 executing program 2 (fault-call:4 fault-nth:1): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:24 executing program 5: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000080)='fuse\x00', 0x0, &(0x7f0000000340)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id', 0x3d}, 0x2c, {'group_id', 0x3d}, 0x2c}) read$FUSE(r0, &(0x7f0000001000), 0x1000) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./file0/file0\x00', 0x0) read$FUSE(r0, &(0x7f0000001000), 0x1000) listxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f00000006c0)=""/237, 0xfd43) read$FUSE(r0, &(0x7f0000002000), 0x1000) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) clone(0x0, &(0x7f0000000340), &(0x7f0000000180), &(0x7f0000000240), &(0x7f0000000540)) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockname(r1, &(0x7f00000002c0)=@xdp, &(0x7f0000000040)=0x80) write$FUSE_ENTRY(r0, &(0x7f0000000540)={0x90, 0x0, 0x3, {0x3}}, 0x90) 04:25:24 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfe80, @loopback={0x0, 0x1}}, 0x1c) 04:25:24 executing program 3: mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000000)='/dev/snapshot\x00', 0x200002, 0x0) ioctl$TCGETS(r0, 0x5401, &(0x7f0000000480)) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000380)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000340), 0x106, 0x6}}, 0x20) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="2c04726f75705f90c007", @ANYRESDEC=0x0, @ANYBLOB="4bfbeb2c95212d3b0af3c0ae4f"]) read$FUSE(r1, &(0x7f0000001000), 0x1000) read$FUSE(r1, &(0x7f0000005000), 0xe83) write$FUSE_INIT(r1, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) read$FUSE(r1, &(0x7f0000001000), 0x1000) lstat(&(0x7f0000000440)='./file1\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = open$dir(&(0x7f0000000080)='./file0\x00', 0x0, 0x0) read$eventfd(r0, &(0x7f0000000a40), 0x8) r5 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000180), &(0x7f0000000040)=0x60) ioctl$sock_inet_SIOCSIFPFLAGS(r5, 0x8934, &(0x7f00000000c0)={'team0\x00', 0xffff}) read$FUSE(r1, &(0x7f0000002000), 0x10165) write$FUSE_OPEN(r1, &(0x7f0000000640)={0x20, 0x0, 0x3}, 0x20) fcntl$getownex(r1, 0x10, &(0x7f0000000600)={0x0, 0x0}) ioctl$TIOCGSID(r0, 0x5429, &(0x7f00000007c0)=0x0) r8 = getpgid(0x0) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f0000000800)=0x0) ioctl$sock_SIOCGPGRP(r5, 0x8904, &(0x7f0000000840)=0x0) sendmsg$netlink(r0, &(0x7f0000000a00)={&(0x7f00000004c0)=@proc={0x10, 0x0, 0x25dfdbfb, 0x400000}, 0xc, &(0x7f00000005c0)=[{&(0x7f0000000500)={0xa8, 0x31, 0x600, 0x70bd27, 0x25dfdbfd, "", [@generic="05f120040d288a3186ee3d93b153e0d88166bcd4b84774de7bfc0f339b7ea7ce0174c9e27f5825811c4a24b1a333c3eac6f2f9a144269515b6fd29a22f08a64eb50d60070dbd78d2f99245089f4aa69fe24f281c146252acae251e65c2d69838cb2e48ef8f12e71a872e7fcfe4ff761d9d203541d9805a4975a377c4a194fdf222417d5e5e2319d9d805bdb8336e784a8bb9f1ed00"]}, 0xa8}, {&(0x7f0000000680)={0x140, 0x14, 0x2, 0x70bd28, 0x25dfdbfe, "", [@nested={0x130, 0x8, [@generic="5716c52f35292895d569c4f69736cdf45aedd0c6290aedde1bb423e892c7bb5f8e11a8b60e0b084bffbf4c0634e2787ca985ff7d76db27753ec171638aee63be9fa13eb98cfaea858246d334b639d095ea38654e6d13d9859685da8d53eb0f5ad78a44686c9083fd9ed90a0497f4b486af769e6b7905261c4bbfd6", @generic="e6fe8964db16cf0d07ad69c6", @typed={0x8, 0x32, @fd=r4}, @typed={0xc, 0x28, @u64=0x1}, @typed={0xc, 0x37, @u64=0x400}, @generic="3c1cb78132865d70d3faef28be9c906f46b74d2bbeedc386f0420c1a33e2e68466bfc9a0e6c4c125782e65a9ee72c472d33759247cf4dfc07c39127ee5e5bd1113d9074e28a63d17f34fb96e018b985868e08bf3e4de2feb11be3e", @generic="28cdec32e0f671e03ec39d9bfe9c1df45213014153c98d956d", @typed={0x8, 0x47, @uid=r2}, @typed={0x8, 0x25, @fd=r1}]}]}, 0x140}], 0x2, &(0x7f0000000880)=[@cred={0x20, 0x1, 0x2, r6, r2, r3}, @cred={0x20, 0x1, 0x2, r7, r2, r3}, @rights={0x20, 0x1, 0x1, [r4, r1, r4]}, @rights={0x20, 0x1, 0x1, [r4, r5, r5, r4]}, @cred={0x20, 0x1, 0x2, r8, r2, r3}, @rights={0x18, 0x1, 0x1, [r5]}, @rights={0x30, 0x1, 0x1, [r4, r5, r0, r5, r0, r0, r4]}, @rights={0x30, 0x1, 0x1, [r1, r0, r5, r5, r1, r5, r1]}, @cred={0x20, 0x1, 0x2, r9, r2, r3}, @cred={0x20, 0x1, 0x2, r10, r2, r3}], 0x158, 0x810}, 0x800) ioctl(r4, 0xffffffffffffffff, &(0x7f0000000b40)) 04:25:24 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) ioctl$KVM_CHECK_EXTENSION(r0, 0xae03, 0x19) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x4, 0x80000) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f00000000c0)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xe}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000100)={0xa, 0x4, 0xfa00, {r2}}, 0xc) dup3(r0, r0, 0x0) [ 182.970658] FAULT_INJECTION: forcing a failure. [ 182.970658] name failslab, interval 1, probability 0, space 0, times 0 [ 182.981961] CPU: 0 PID: 10931 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 182.990449] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 182.999806] Call Trace: [ 183.002408] dump_stack+0x1c9/0x2b4 [ 183.006051] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.011248] ? kasan_check_read+0x11/0x20 [ 183.015385] ? rcu_is_watching+0x8c/0x150 [ 183.019521] should_fail.cold.4+0xa/0x11 [ 183.023573] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.028666] ? kernel_text_address+0x79/0xf0 [ 183.033057] ? __kernel_text_address+0xd/0x40 [ 183.037536] ? unwind_get_return_address+0x61/0xa0 [ 183.042447] ? __save_stack_trace+0x8d/0xf0 [ 183.046757] ? save_stack+0xa9/0xd0 [ 183.050367] ? save_stack+0x43/0xd0 [ 183.053976] ? kasan_kmalloc+0xc4/0xe0 [ 183.057842] ? kasan_slab_alloc+0x12/0x20 [ 183.061971] ? kmem_cache_alloc+0x12e/0x760 [ 183.066275] ? __split_vma+0x115/0x7f0 [ 183.070141] ? do_munmap+0x2fe/0xf90 [ 183.073832] ? mmap_region+0x79b/0x1da0 [ 183.077798] ? do_mmap+0xa10/0x1220 [ 183.081405] ? vm_mmap_pgoff+0x213/0x2c0 [ 183.085448] ? ksys_mmap_pgoff+0x4da/0x660 [ 183.089662] ? __x64_sys_mmap+0xe9/0x1b0 [ 183.093709] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.099055] ? lock_acquire+0x1e4/0x540 [ 183.103017] ? lock_downgrade+0x8f0/0x8f0 [ 183.107164] ? lock_release+0xa30/0xa30 [ 183.111118] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 183.115769] __should_failslab+0x124/0x180 [ 183.119986] should_failslab+0x9/0x14 [ 183.123770] kmem_cache_alloc+0x47/0x760 [ 183.127810] ? percpu_ref_put_many+0x131/0x240 [ 183.132378] anon_vma_clone+0x140/0x740 [ 183.136337] ? unlink_anon_vmas+0xa60/0xa60 [ 183.140641] ? copy_vma+0xe10/0xe10 [ 183.144345] ? do_raw_spin_lock+0xc1/0x200 [ 183.148578] __split_vma+0x313/0x7f0 [ 183.153203] ? find_vma_prev+0x140/0x140 [ 183.157244] ? find_vma+0x34/0x190 [ 183.160767] do_munmap+0x2fe/0xf90 [ 183.164291] mmap_region+0x79b/0x1da0 [ 183.168074] ? __x64_sys_brk+0x7a0/0x7a0 [ 183.172124] ? lock_release+0xa30/0xa30 [ 183.176080] ? check_same_owner+0x340/0x340 [ 183.180477] ? __check_object_size+0xa3/0x5d7 [ 183.184959] ? lock_acquire+0x1e4/0x540 [ 183.188917] ? get_pid_task+0xd8/0x1a0 [ 183.192790] ? mpx_unmapped_area_check+0xd8/0x108 [ 183.197618] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 183.203049] ? arch_get_unmapped_area+0x770/0x770 [ 183.207884] ? lock_acquire+0x1e4/0x540 [ 183.211845] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 183.216852] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.222369] ? can_do_mlock+0x10a/0x160 [ 183.226336] ? can_do_mlock.part.10+0x20/0x20 [ 183.230811] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.236326] ? get_unmapped_area+0x292/0x3b0 [ 183.240716] do_mmap+0xa10/0x1220 [ 183.244151] ? mmap_region+0x1da0/0x1da0 [ 183.248194] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 183.252236] ? down_read_killable+0x200/0x200 [ 183.256712] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.262233] ? security_mmap_file+0x166/0x1b0 [ 183.266710] vm_mmap_pgoff+0x213/0x2c0 [ 183.270581] ? vma_is_stack_for_current+0xd0/0xd0 [ 183.275414] ksys_mmap_pgoff+0x4da/0x660 [ 183.279455] ? find_mergeable_anon_vma+0xd0/0xd0 [ 183.284190] ? __ia32_sys_read+0xb0/0xb0 [ 183.288231] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.293753] __x64_sys_mmap+0xe9/0x1b0 [ 183.297622] do_syscall_64+0x1b9/0x820 [ 183.301489] ? finish_task_switch+0x1d3/0x870 [ 183.305977] ? syscall_return_slowpath+0x5e0/0x5e0 [ 183.310887] ? syscall_return_slowpath+0x31d/0x5e0 [ 183.315797] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 183.320796] ? prepare_exit_to_usermode+0x291/0x3b0 [ 183.325802] ? perf_trace_sys_enter+0xb10/0xb10 [ 183.330465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.335294] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.340464] RIP: 0033:0x455ab9 [ 183.343628] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 183.362789] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 04:25:24 executing program 2 (fault-call:4 fault-nth:2): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 183.370480] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 183.377728] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 [ 183.384984] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 183.392235] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 183.399484] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000001 04:25:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc00, @loopback={0x0, 0x1}}, 0x1c) 04:25:24 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="790b04c9369a6e47f55f778f90d02f7ed4fa0353a1e30270ffff0e82a1677c3c4005be07afa916ffffffffffff00c8d890") r1 = socket$inet(0x2, 0x3, 0x7f) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000280)=@nat={'nat\x00', 0x19, 0x1, 0x160, [0x20000100, 0x0, 0x0, 0x20000190, 0x20000160], 0x0, &(0x7f00000000c0), &(0x7f0000000100)=[{}, {}, {}, {0x0, '\x00', 0x0, 0x0, 0x1, [{{{0x11, 0x0, 0x0, 'bcsh0\x00', 'ip6tnl0\x00', 'yam0\x00', 'bpq0\x00', @empty, [], @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, [], 0x70, 0x70, 0xa0}}, @common=@redirect={'redirect\x00', 0x8}}]}]}, 0x1d8) r2 = dup3(r1, r1, 0x80000) getsockopt$bt_sco_SCO_OPTIONS(r2, 0x11, 0x1, &(0x7f0000000000)=""/22, &(0x7f0000000040)=0x16) 04:25:24 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000080)='oom_score\x00') sendmmsg$nfc_llcp(r0, &(0x7f0000004240)=[{&(0x7f00000000c0)={0x27, 0x1, 0x1, 0x3, 0x401, 0x7, "c39b5ad9796d3b255534f222890be55eb7bc520f8027eb69f8df2743d905b9814dc065bdda301dbcbde0b29fd189af19a742fddd4006cb97816fda3897f1b6", 0xa}, 0x60, &(0x7f0000000200)=[{&(0x7f0000000300)="e82b20775d1d7d1386dddeb595414d0aaf645c206c6b81968dbe932da5457070eaf847e0ef673f4fe614b2622e6bce4dd591bab5717b1fa81be60fe113363b1c91cb824bcc0c91aee362aa3c3b7e2a1a52241b553b0bf876e01469b45ffbb219deb999ddc6b4052bb2ae6d1982499770c56029cb27b1f123430fc66b7a435c1973a757dcc270e7f787c8acaf9a2f4ece26c77122d705e36afed48f7d22ec4d4179e8a378950268b2c5fada9aee4fd69fb78131517ab4037e9e1de9b3bdf4de7e60922f501df81ced2d3f3fe5b3ededd6", 0xd0}, {&(0x7f0000000140)="8014bcd8076cd8765c54b70d495557c6d56c9daa1e4d1d7aa3e4c45098e942222cc76e58e5720dd74cc45a3511ac", 0x2e}, {&(0x7f0000000400)="0ede18d1d1978a89932b87fef2bc184b3a31f403858b1f6a1d1dae6ce43dfaa5eb3f10a978c3b2706ab7e66f5e14f871c4f8a04b0b8c4c4ad98aead08bacd139e6d0d330dcabf9c5fd56371049a07bc985da9b6e343ab651d1231b71385d7fb741fbc5c683f5907bfb58c400ee062d7e3b13af9f1f856adc52894a84285985af727a4166ccea462609157676e4ef8fcf5ecd2b048b98a8b1640e55047dc39e02b57809c730e4956afe26805733669a63b94129512c6f0ef699b675d698677e63e5c397c3ba7f33c96b8c1c", 0xcb}], 0x3, &(0x7f0000000500)={0xe8, 0x0, 0x40, "92c4b887a9a8c4f40737e2aace419f1a7ceb537f48d7f6bd83b84354d58ea06b2212e1adf54ac47e923849d3ffb740e2267f69da78f91389a10f56afdc6d2b7104f7cf50dd32e4dfa1571f8fabbfd79a9f910887a74b0b81d3aaa4c15e6ade818ca08774a44f11b4cafb7311478d096a8c51a4226c4066e4682b9c6fe1004130d3a752eaabe032cc9b41e2f81882ba1895076765697ce7c2dbd8ae67475d10b324a8a19d3470d8ff745e2b7befef059a1d3e81f518d1feea3f64e3f5600ee7d056081c4bb19276ba111a2bdabcb36ffb52ee9f8d80"}, 0xe8, 0x40}, {&(0x7f0000000240)={0x27, 0x0, 0x0, 0x2, 0x4, 0x9, "1bff0c465dc8a82f0c7589e7fe8efa34e5d078ea3264f4d4b533a10a993382415fe8d578cf8b662a0ee78d384074aaf90e3fcc8a50de60fc4e46bd88549a46", 0x8}, 0x60, &(0x7f0000000700)=[{&(0x7f0000000600)="b2fed77e555ecbd93d5eb8f65aa5b9f22c4fccc99a6bb0e9aabc3eb34c125fb513f79618974ef6f44915d0fca2d25640484fdfac8858247165d80c8d9233e09169ccf7ba9ae1b651abda33198c31f346436e41788acac4ff2f51dc67f97d07cd35e57ea4a12535b2b5d449a7768dad1be957df0b10811ddc8f10fc48684ac46cfe76867b3c5073a7295281c5a238d0103814d20c07adcead3f2d95520e3f40ecb59a0ef76ac0cd760a11c5de9f8829b51eb707f7cf8cf456e35d103a9e905b48f01f15b4e7bb70055a9f2865cb0d3a22717241742e25980faa5bb4677901c2c2ffbabf3a", 0xe4}], 0x1, &(0x7f0000000740)={0xf0, 0x10e, 0x1, "33d61872cdab73d17a65733225b398a225a0722d964b34fc32d6caeb14652a737c76b956b21ec958f60d1d759352997cad3f61379f2d306970546503a7544a4260e2393633133a4a7392ecc6b9268b9a941ede7f18aa6a061e5b22d00c256b2a646984379cc060202b23d347a22e4049f61fdb6cea8ec193500c84c1479ad5265ce1a5563f41b73e3a5c1f55284a3852dc48c2be8c9d22a55133600dfc3245377e46038fe5c9a118c99592e7aa0b636d801914133ddb542097ea0ec81eaa8123e5ce1cc90fffc835db738daca07b60d81c651417aaf33595f418cde83912"}, 0xf0, 0x4}, {&(0x7f0000000840)={0x27, 0x1, 0x1, 0x7, 0x9, 0x9, "ee9cbc6d2e360439371d18823681d12a316335142a6bcccad1f3add685525af41898531c514b125b4ffc3e1d28b4bc9537e8065db8e5ac53af286ef84fd988", 0x14}, 0x60, &(0x7f0000000a00)=[{&(0x7f00000008c0)="8f5146cc348f0e7e582aee1a7aaadd0d498a401d3da51a22d9e151a6331a5e676b37a2f02416bc091d283be8d996689a9d7fe41a2eed5c216d99c3e876d89a786b508ec0d0d3a750e81ef2f93da5363500530a58c2277f8a80a2bbf44a17b00e877d5dc0f241ddc4af0475009e709c", 0x6f}, {&(0x7f0000000940)="f2fdae1e189d52a7dbc1929fdd01db8472745207462677b6096373beee45b27d09251b043a4d964a30fc702599c8d0c4a6f0613633fd7feefd4a5a4b6bc1ac22447b38145f201caa32ebde89d5", 0x4d}, {&(0x7f00000009c0)="6de2f1aefd6a6377d188abb3d7ef047b4348e3f621bfab8648e86a2ce3b65f23ae2e03e77516aea3e438ad07040cbb17b5ef", 0x32}], 0x3, &(0x7f0000000a40)={0x20, 0x11d, 0x50000000000000, "ddd572509c4a27096f8afb"}, 0x20, 0x41}, {&(0x7f0000000a80)={0x27, 0x0, 0x2, 0x0, 0x100000001, 0x1, "048a41308693e1929af85fc090ab9c59ae8086d9ceacfbfa88a30904e9bfb59167251ee9b1cb58292c51df80a99340d112e8b2191e9e813b0cf581b62ce2a0", 0x2b}, 0x60, &(0x7f0000001080)=[{&(0x7f0000000b00)="9d5fd1bc4670c644514d58e749c6b72e7c2e9e952b90f6359aa21b4cd398aebab2ffa583ecd9287a444e72a07392f2bafdc2bb6d21f806fe5d697935fd3400da40140cda76b8d662e21fc28e9cc447fe1b652a34c958f0bacda7eb865da0a574c3d7b73956b7d68f969d1f83a3adfd82d6d7ecf518c6fcec2187053567c447c8560906ae1228604cf4f5a80cf7d82c52bf100b32185af908f8fd6c8ae7e3769ec0008039cf1f76ee62b430014f", 0xad}, {&(0x7f0000000bc0)="6cccb5efefa1358682c59de556549a96a5c94fda9d58d85e2a42c11f79198cf19977474b0fe8ffa4ec3336a8d5891ef6f664a91298562f8ce92175a376139fe5d2d40a5e", 0x44}, {&(0x7f0000000c40)="e9b07e772c0a8cfb6f45", 0xa}, {&(0x7f0000000c80)="6b5dedeecfd3c4458921ca306401624305fa6f3c2b8bf432ae6ec6800caf2d0617a60ae5ba50c70941f3046bc691eb5fe835a6d7f632eba2c3d8f2422e863dd2add042eb7eb8f93f3a2e293a72349e4bdc2f59cc73", 0x55}, {&(0x7f0000000d00)="7b8072696a5d56e6dc1d40afa63eabf800f31fa28fc0136363088935437bd2dacae4336ab39f1e221b9fa7b19b0827331f1f06f332b21e933318b529f28e6075ab1511533ee2b6b528d34379140a08f6735b753e1292974e8ec57bc382b21598ad0d3b79eaba1427232bd99e1ea51dfb987340ca8e01a29bb285678f8c7d7c476030a0252342077d77f404491ac5d5163ccf81cfdef9a8f23d675a198c0e106feff16255a65600cef7f2b9e6d8085cf26fb5e851064eee8233a3c6f62ef05dd74e86baa85e11f69c5aa3c58a1bd8843975b8873d737b0637d0101b8fc99a4bb8ec272ba4cfc3efbe3c3f69de3918c845d355ddf791", 0xf5}, {&(0x7f0000000e00)="93335464fd258bad8611eb425642c21fd1fd1d9975ca92b8b842d367bb30218bd3147bb26b3f9d73459a1c40f33a3e7ac563088c750f6bf516293c84a6fca65a1ce5d70cc8a9a207859d99550327328d5fa740f22be2c9f143956ea4ae1785e1d11a53070dd105c4d59e", 0x6a}, {&(0x7f0000000e80)="d2deb7075b2546fed27b5842ab35cd91de26e73debff0f21f1651b913f829ea8a88ed6caf8a4b83379b7edca713c083c97fd5095c78e83261ca314cecd13a95968b3559769f2bda02a3802fc722420f3b23deac3cc84e7e15b1c5e8b2190540b3dec9cf4b7d20d411ecf8d1aa0996dffd3354fab6ee3a5b2ae8abfc4b76f1d8d115b69726be1e3a872bf55846d2e909e3f44b596c4c99b6874c7e9963f71dee1d866d778bffe904152ccf850f20f33b672bb442563d6f88dd5a15586ea67b19ae8c8e04e92eaba85982690657c878d20abbacc2adaae98af646c415798da022fc6d5", 0xe2}, {&(0x7f0000000f80)="2ccab519f847629b46c0cbc28f765cd1d83bd699be9f49bf6cc407d80e0b6e6bbdee5a02ad4b7dfdc5c9bd017193f21b6a63ae7b424d4d330c906837457e450a598aa6c1bcfa8c4eb15e8991da5aad69fd1059e22608186275874e5c7b7ab405bd9ad1fc3b27ac0b412989e76cfb4aa4262e6e8123dd4d9aaa806099dd6d5112e6f85d86000039592395d01f9a3e8f37a63d399dce9c4cd57ad0399323163ccc2362e7efcd745fd50187f0ec6b0a045cafd33bfd3480cfc5735e91e6449544848eb68282407c23dc05f45a2fe727555aac62c48770432acf9e79cadb1484b1e07f069c83", 0xe4}], 0x8, &(0x7f0000001100)={0x1010, 0x12f, 0x0, "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"}, 0x1010, 0x8001}, {&(0x7f0000002140)={0x27, 0x0, 0x2, 0x3, 0xe8de, 0xa161, "ccaef76bf67354ee72415636ef6cd843ecb7a87901fb371059c248607a7691349f32d59b15ff1f5e8517005fd113a03e8a9949745b0dda9cafcae8184e98fb", 0x1f}, 0x60, &(0x7f0000003400)=[{&(0x7f00000021c0)="48601e987b8b07c29d364dfd928d75424e249f407dc7b771f0834fef8849cb2f22f80eb47c994a02a1d9d69170dbddda950c85e356798b03ddde8be34dd63962e6e56762172e9d97f988bf639462a6270f780b105fa5beab194956794365f972b04bad3488f1aea0a28499eb0f939d03229ee8eb4465e826db88f23341c4c73bcd2723352d1845308e22", 0x8a}, {&(0x7f0000002280)="349e568f67cde9824f376917cd9fe2a776f33220d8c82696f5a5ae541884d064dce538d2633d5e723dae6db23fb1f6e6125aaf223ae4fd0f766e7388df5f6c67dd22604440aaea909b82d4d3d52e445c0bf50f73691511b3717b71bed01791aaba4cd1f59dd60516cd2751d914ad8568124e03844bffc00fb967bffe7c81778e119f79d0caaae4c4576cc4a22eeef6c91c95656b032319023065c81980fa797bf672f436e13c72eeb42c196cf93c042a02e951f411e527e7e6b0dba0a976a9e6338a53dd71cedff0457153892bc7a9a189b0b06be2f77a16c54dac6804cda871cccd496a8dcf588c6a1934960e9c863d793e", 0xf2}, {&(0x7f0000002380)="bfe128d2096ef469d4783160d4db004a5781f4dd91a0c3f2cf86e7629fbb70b33ee7dad777687c7090d836", 0x2b}, {&(0x7f00000023c0)="ab4bf7ffde0e5a6a672c8894137f1aa5729fb9af9379f7b48570a573b4bd8b743738838bfbb1da11d856532ca53cba375179282787a66cf85cbfbd0d268a3c65e2a55a7383094dd1677ff170a9718797dc3854a0091d13d64481dc86761117d141631f5915d6c5722ded8cac73ed6d02668dec1120e1d43030b0b05ad668f7c554a5bf2d4c849478c29a674c55958f7b16d07a4de19c4401556aa40643b16037dd8600bef9fe757fe2d9d036e19d0d5bdd159c3d90665a7b4c33f0c078c43b2ffff2fe8f8138f7de7cbe9deb54bc30ba97fc6c629c83d426b41bd66fe42df6185618da3745c57e4c9472d2485f5b7e370d3de72fbfe30c0b2e37bd7b8fe97bc446e37f2b49f8397d361395b9e751796fb11efb42ac13974b1807ce0d2efe8ead4276c158987ebd5d9cab4c2e66e8ff503c7306abae31dff35608e4760a9770598de0e0f61009f5a461738d5df0cd002f97027d229a19fff280bb9876410d4e6dcfae9b92fe7c5ac143f7c08e7d5c247180639e0356244c33e5b5cdec18daca9063abce97fbb17c56050386df9f3274edd4c70fd53ffff50fea806b7fde0050dc4c0b6e5052f8696c522e7f518bacc3ae3a62d2ff7e09b7dc3fe05552ae70aeacd5addf472255bec740ee62dfb642e1d1946af622a884685da7963e9765cfb2a3afcddda8d58a38013f211513740f2fe0694a2ac05e2cac2e28351c49f1468f098bebafb50eb0287d5eb863842530732b75b1c577a660bd87299f176362581e46b91bacca9a397db180af166b936b77cdf26e36a3806b872c520680c45fc6bdda5086ca87a08bc280b649d76b5d6c372cca401fc8d0e8815d20d1046693fa85ac7b8e015c31f483661e0950abf55cb3c10c895e2e0cf630e032e86b754c09d05ba904ee99b53136258939e27228d3121c098bd2563d68a9d816c311ac69db9856922e3a92de8cd15c8fdcf114f165972c14a1ab776e66ceaeed2fb5f563a27d04125abbe7d6447ce5cacc8cc93f1b72153ac2bf0029f685ee78f0483848ae073576549842a63dfd2af70fe2942df44ac973291bbe44198b8d6ce32759c4d4460d676a0924bed4ac8e08f86cfde6ffa26d1f2729401c682c74b14e78dc49615f721e744046b09d3f3a45c78a6b1f9212b642257e484e6f6032cc571efb988a84cee6cca67b69ffb71c9f244ee020defecb1838b58a6bac96f0b774c46655d9317d0f496c69c00a65b871b58bebb70c6a37cb76d0ae6fc8409c6ded167fa9840af637cee1f6adca53cd8b7e16d15d4c5a0dcfafaf9dca95258c2d6eafec09992da0fdea81e360330c0a4ca42002796a0b2f590f51d4abdd7f5118285333223fd267dbb033aaf4c82811a5adbe33518713fd68b05e120c2378619a97b8a4a30aabd5c00959bbb1a54d8af2fecfe76bbc9bdbfd8529d8419c4de8ab628fc1947dd096d4e17a6eb7ae85debbeb35b2058883816f3a6a882d76b1ec6e5d4b1a6d95ab771aff6f4b95db306c63132e2f1e2b32f4dd1496e9cb19fae6d0835eef3bd235c2841fce54d287719f53e26a930ac86bee19108c05a8152ddf52bb6e4026b0e889b6c8edc33b9329f4a81bf9ea97c804a62ed4c112c97e918f578819ed43d653235377416be8ec79c04b8358a9eb2152fc646d71626135f6a5d30b4276981a27ab939a364f288c15dcd604d90d5940c5f7e11cb252cbe2902cdc500ab4fcff1686be5a6b82c92f439d5a69d3498fd501dff039df40a025a85afa10230b3c22e3bd01574a14434248019b7d09e178b626b561935f96235a7e644d04aa39c303132d0a3818076412f9dcc49d7780272caae5388059e8d5855c720e71e09955828d95db2b2141cda95b7bb8fa268a36dfaae63ad9ff98421ac9a85dac4b76de2660a84875563d26c843f2f6b3188ce4859ba9eb9fde126d5e14dd837b3b2e6751d6d35822354bd954a335d8beb8543fc81d08b1df080a2c6708da4321f7424bf63b221b6f1b72b008b8d756e2f4387f568c9548d2bf8fdb481e46186a7ff1346fef38c90ae8da61195296ca22eb635596e53fe34924a2fbbe7dcd509b6b2ee68bbed4414d85735d319a01e2673bc2c16636e2fc8f09db4b0acbb18b70e87ccd99cc38add2308d0af4f234d810e28057962fb26cb1f414a968cf76704a6a137aa55623a0e376bfc93065cb096e0624a3ce336c3d5b0cc4e5e464110418d09ac0fa9386966b2b4eb0fd970220cca43220697ff546393d2e65450bf613719fca95e2b56bef9394b03e90a5bca62d94b63379015e2e724d98da73b0ef548674ad0ab51c708b650e95c1f23cd0c9b92e40b7ead2450dc3ab62c18a41119324d926eaeb403707202b9de55dd36ced7251166e7deb1837b158e68babef885ab5d22f0bb51810b5162692164ce8722982fd89b99f5e0849550f90ef8ef8a451386212133e1f9b07d10d5f3625b326e9498502f7eb32eda902604ef2eec0f28afb547f98148a895a3dfbf1c7c5cb1735e41ad39e209530a51e3492c20199c6401b877a9b7e41c34ca3011ca1be45a67b4958c454409c3740523541a25a5d411b14230323ba54f1c7a9ded6f32882be7bd8615f70c1d984bf75accc735957911343d7e0540426814c904e8071ae46a6731d521781bc9716fe4e2ab80bbcf4f3c0506657ba47a70b96477ab2aad350758ccc069bd9b49b54f1e54de31b1e654a41a95283c34480ae702f04780c1c06fa0bbaae0f0695d17a1106b86db8af05311839e92f3ccf26348d8eef7faece9de63b7342b6b4a75e04af942993f02b2a6ced64b164da8f72b72b7ea1e9e593c4d1630a8da2db3046d07b0fdb3ac73ffff748e08cd0f9320e4d5cc4741157aac517d47e34d4d525aad35b1acdd63ae60ce381b4d54f438d585e3b8ef996ab149764e82c7fdc1080be250c7145fcdb1f8c9542e6783f4f1215dd85c5c692733c5c3fa957d6e46a5a9c5180d18429e0beda0d2f63552ff83cf98657ef02b6c0658e30a1f5c32f7784b6933340a5f7e94124b6f1dd30cdbdd7e037f9750ef4e87088fd62c7750925edb3e466a30b5f960ee5558d5c66c7956d3a31c01c33fee0b2208517e6dc73ed4339c6e8ad5d69bd1712196bab8544f1bb01c00ea6b6f7fd5e6cab5eacf01ca93e2d55a6db26c9f35ebef26cb0204c6cd117ea6abe2aeb862dfcf3261ba5684fadd5807ad6e1627326a458f53d30788d1c684df1a6adc1979babed6a99f7fa4ee54a45ffb5aaffbc473320cda6ad408aee3560ea82ace423225935657f3d8eefa195a2b44a1fe924a4b9e89d4b3e921b2f1cc5f619d17b218f4575dec7e96f2a81ffbee0e614b881342ee73bfed76ff9f4e4f68f7bc24cefabd60ff14937f34f8d6c9fa58c81c5b75a2cce4c296f5fadb9470336345d47b62ee89f0049a1850e5a0e208a2fb7b04e46b2a41185ca98c37ade7b8d4479fe8818cd602deebcd6886ef2faa76ce8a658384334c9efc7317713c48557362ecf1704be8636bec3060089d2000f385ec1b4f2512cfcc403aa63504ac39c218ed19c43d34bbe724cf900072609cfb8a14509ec783e9d789f68accf5c46af7f4fed7f7a20b012a44c370d5f977953aa1465719cccc42653c934c97419d8d3ee3559ce592d6f940f5d62e7e9f3e5f414159d0f4d8f469a16e4181e6258c1205533057ce9751df32bee1ac3610098d5d25498ba21878d566b98e2a138cf5c8355f76c63474b036570d2ad94a3c740105d52fd32fc8f57c3c6987a80a7eca72e9e222dda4ebe15facb067fdf6bde54747c30386642c42a867888f197233894e651c22aedab855cfbe86934f260cc5f4c116e5abd6226fcc3821db41282f549eaaa22a90ce669e5298d1e3eb52ea6f8c6fd2e18113cbaaf64678c80dde1c0cc751e2d47323cf0b4f371ce29971734b066a78025df819861a82539e1673b39e62502b782f72a71902479ec8cabe59645f40ce90c0591948c5b98e83ef30f1fa51f0aa112c4dd482a71176f7273f7c9c0b3fab728b88d4c991fb45bc934ffd35da31eff9ccb0c40b5623f7e33c6f4e2d39701b7a72b21416b5b24a37b362baef13e8293eb33660ef1274e65e6c7ec7ece122e55b3b3966819a913b15d9bca04b2c2bd41751f8b31f4d70155881b1649a0f24e8747d194375c60395e21affc31d46e45f752c7acb8a3f16fe8b37397e2187afb0a445e1c92c15ad3586229d7575bdb0f5d5e0693721746fa756c427f229ad66c6fda0338b4b50e99eccbf8fd31dd2c2344e447f9dcbbf906ec9adbec014bfc2ccf7b8de5e00139be0a91a37693c1f5e0a6083eade2c54f64fbc2505936e0530ea90fba3b5f3b7febaa64a0706bee7b23dc0110c318ca4a1e9ee9c7c50f2fde7ecb5504160a45ef74c1d3c3bdba65e142cb546b8cd80b0c6cae5cd15a08a21545640988444ade2e01a82a03233a9152e7ef36224cd1540fa85bb1dacda4029b53e80487ff2a3544f0822f5ae0c451bd4787230de106fc29077698468eaff8c6d85b51c2aed2cb0bbb1a74ea74d76af52653043046b12a874e542182af9406a6c2ddb2734e3a0e0e8a518aeb42f3656e71686d8baa1ff8322d80ec06f11767b92d0c905a95eb35dedf75f6142e275039f8994929c24daf811419cc37d651a5595d5bab270b24623482f784bd1380e89cbe56bc271341dceaa2f2fdf26fd6e0d3643b646b64a9a5486d180e4446a2208a76b7b5f5242088c89d2a6092476831eba93bee3dcb737c32d79f7cca8892844d0bc6fe91f4cafeb6be9e59ebf76e210d6167abd604ed8030464e15980a402ea5ccc75b34fad46e571a8e531099682e9e3bf3f4c8b6d82dedf8e64ec0fa72c40c3c65ade2d02a9b4cb463f52724a1784b756f3fb1597a25b085d0aa9819ec5217c574265d0364340b89efe068cc476f6cadce7f2572b10d4f2bca8a4c31a0d3893aad1118823f615d747019766a100693c3251c04f3c3c90ce38a1cb60aa3d925faa32c1c8c8ac3373467910c5ecf199ec03f6add601eaee9df36c8c868abbfeb51b02357dfaf16d11d366a1b9f2cfbe4a602b4d8bad59baf42051cd449cbb1ef30c341f8dd7cefa0bdd95b8d66e0788cfa50bbedaad92f22b469225dc3249454308e83e819876d831e717a68ccd38eb01c8754e372f603bcc15042cf7eb96402b46aa558b8c93ce42c089e6eceeb943d4edc81969335535a027e2ec37b87e3517a3d04b7e181234c8be2ae14d02a5143d8926ac3ec151a100e8726b3e18a82ba17c9dacb896486925ee2a104a1bb02977bcffd6aa8e19236b3b4f204a35d9a565be4f0cbf7c7c1b5aadda558f1333b26723f351143b78452dfa4cbfa3bbcce4d1ae732fd0af0edd0827cd0ab660369b1804c66dbee57957e51a85105e4c9c540f2c570b18f8ba6fc3d01b8775d6f5182c804237291eebda023a722ad0f059a6c4c148d5ef7b307c8302f0c0debb184dffcc11dd7e3135bce16b3ee8ab4b719712644797d3b5a5b443b80a0f8af697ef2b0dbb58f0c7cbbef7aa22f8ee9b46f4c07d9af68254ee1a6afbe42b2a55e8cc83d18d60a015e11a9fd3a4de411ee750af503d2a5b71cfdf1846211752cac738d8d697acf2b5eb3faec07ad36a654785c0ad6245e8deaccd8ae67721e210398e422c2a0deb80995cde0747aac45cf60cf5fd703f83f1639acc406c48c6cd1fbd54a4fada7a424b4b99bf99ea0cbb63f788c1f21063cdf0438b6d5cbf09bb30843bc5a988c7730a072a02d14e997b91b2f26a6aa693f23621e6d32111d4d5435720e71eae3629cdad2c7c84de91830f9", 0x1000}, {&(0x7f00000033c0)="da1da6b2f34b31113c1e8cbd15985d9168188122c0bfea524ce616b0c5d67f8229dda961a64a8f35a7c04d59ce56da", 0x2f}], 0x5, &(0x7f0000003480)={0x18, 0xff, 0x8, "4809a3"}, 0x18, 0x40000}, {&(0x7f00000034c0)={0x27, 0x1, 0x1, 0x7, 0x0, 0xfffffffffffff17c, "ffcf8359c8b4c58a7b705bb0f17d7fe63eb25aa6c0d59ac101a31b1051945698e1d16c67707909340594e45eba965591a78d29f137f1d885054c4fc71a59a8", 0x1f}, 0x60, &(0x7f0000003c40)=[{&(0x7f0000003540)="6e972d92713b2bf3ca3f144f2376124e078e28c871409c4a0d6eca1cfa170af6e20d1b56ef12c0dd88ad7a1e6e1f0c972521f1fec2ff544231b5a5995096fe2411524bd25a16d36036b47be7ab9057ff3ce1ab245185af6c203f1c54576bcb65eb605e36452bd6dd375a488b62b345c46523710f91426623f74c1a1a7656cce904cc01f6259c3787ada5171e0e489f2141b16643e6823c337ba679f5f11dd4c646c584fbc271804892cdd45551e52add1ba91c44892e53b8d87e3c02364a7ea956f4c6e2c0158372e37d6bdffba1b4d52e2dd8db2b7a32fb9e6f3e19b3b27fd1", 0xe0}, {&(0x7f0000003640)="1012885b749bf5592e79810c6e93c7e0e43637564c6ba3dd4f654e426425d21cb7ba9eecfc2263f3370de302b37d8625b32b84f59e3c68f7ec87ddb1df8d1e32ecdbc25d474980b4c2427904ee2e5570f8e82f9e7933fbaab0120290e1", 0x5d}, {&(0x7f00000036c0)="dd2b86cba274cfee77850569af6e021c5069847f1f1c97eca28676bdf6e004a6e1065fdded7e4e0debf55ccce48aec6b273f626ffc01a1cdd20d50cf1f0ddd50dd531282316f7b0c8f0535499dfd775244f0641593ce49a4fafa4c911db98904a44e4015ae4a891c94d7728120f7f16cf8b9cf2dd4", 0x75}, {&(0x7f0000003740)="d450e36db3e24d425e3d6adb2fdc7a39cf89431282b9745c52b79b1171f6bc44c03c4bc1b9ac32d6afcb161c16a57d7b0542de93e95586b366de805febae41326ab03ec78fd1c91ffd04a1e35ae422dff621349e22d9c175d8590db68a2245c4d7297eb27d3eb3a4fb060cf2ddde9b5e1203b8ee2af9c2312275cacdad2ec4b7c289e9c8d75d63a9c4aa019f76588fb125d32fb65f5158fb061ed21a47a121", 0x9f}, {&(0x7f0000003800)="855092b51490dc9a4ae3dac0aa12e7d700f2a9edd044e7", 0x17}, {&(0x7f0000003840)="a9779f7a378cbcd707ef74d7da6dfa877e2f7430d98a4e48f07c6fdcb632ff41dc1512d774a130b12956cb48c10fc99e164b7ae8f305fd1fe2a6dde91cf66bafc8a0c6c51a6ac939e82fdd4c86e252ca2ffffb03b1e5f91cdc4520f8a6b365d04dfb1e96ff7285e9a3ba694ea2792954aec1ada97d69ead75b5a0a58ce7487160efd9e52d8f9217e37cfb0be1bcc79ebd943d06bf6d4003e058facb9aee4c919492a11ad9cfa5e32246be8a183176a9f3bcecc0d942941420879543114e2d1d3e1376d10da3acd501d6ba0aaca62", 0xce}, {&(0x7f0000003940)="87522921c9ba11f1036ad545f12a89a9e139f6c2c4338e74387df9c3772a17bed9710743c4854a4f933495689217024e7667d0", 0x33}, {&(0x7f0000003980)="7bdec487d05bcd5d63197fa96cd5e7c3b8407f1a81f3630530def26faecdee64d434ff5af30c51892c102ac7a8b886a66218b6b792063a4bde603323956a9780e0a883969f9cbdedc2d7710fa68d44132856be96b5136839f10a912c9efbfca57eb7066dab652dd5f791b9e3d02d8d110c018b1eed5767c5f5bd19b8c3547cf22264e423ed77c4e2d218d55724abe9dcf58df8f0b9f0a8b087c532ba07177e0aca24e3abb872fafb0d2134f579078ce66c84a145a6255dfed6cf05b1acc4885154668d04c2268607c4ade8eff8ddea8bdf7cace406c1275d31400f9273006b54336a4fb8923b9e", 0xe7}, {&(0x7f0000003a80)="2e2a8c3b1d18a2ba54c3125b57ba395084257463934c089baec8021073490d8d1e0f4053466bbdf97f97b2b2c91efe80d8e34d569a999f86422947f2df570ccadbdf92e5075da089a863b5b945654c8f4ae3450f4ad9ddbee869496ca69716e528440ee3407c7e58e19a2d846fe0a4809080e9af20c5d0d0ff5eae0a8ceed6337888c0a1ced486f3c6a883dd871b60d5386ecff5a7a12f42bd2be2ea3519778f93d46432ac4881ef41468a00d693ba4e82e1751de9c654a52f7627ce05768b0252f431b60bc86404e70129cbb119ae61dd6f2f130f07fe6c55285baff5c7d6272a7dc65e5641f23b2bc1e70e1bf4", 0xee}, {&(0x7f0000003b80)="dabce58e4ab6e4ad5db47b95c5dcf4d71c1a5262dff73f557270df654bea822f0878559ee8ba1300ed782ffbfddad2a3f0bff34170287649deb7425642872bde61ff47ad6421a58b4a9c03535c93808eb3603676786454b07745941d37d0819574bc1988a8cb902ffee1e1af7dbc8f644d24544c530e5f280d7b9eded539ae19339eacde4228f85d1c696b8851cd44", 0x8f}], 0xa, &(0x7f0000003d00)={0xb8, 0x104, 0x625, "6d921eb425e8378e8f33a9baf3219c8f2e11477100ff16877c4d0448f875bde82481f7d7c3b66acec92c292973d8e627bec45691bf92880361fdeeaa64c52b3b363e6795937e922db2b0471c0b55ad8ff987103f1ac13f5da1201300f87315b316bbbd9440e2401bda486357204faf5ed2fdc7136531e0917727ac72a54e6e6b3d7564b909d7226ae1eac164391d29516047f7a463fdf15c2ace2797a2331e5459fb"}, 0xb8, 0x4000000}, {&(0x7f0000003dc0)={0x27, 0x1, 0x2, 0x3, 0x7, 0x1ff, "e2cd98be0030d7cfbb9dbfb0c001f837a04b86e4f2113d3969b70d138ac287e8995baa0df00f8c1128e2c7cd2874f2f34aff2177f5cf1c34a7504e1ca14d91", 0x3e}, 0x60, &(0x7f00000040c0)=[{&(0x7f0000003e40)="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", 0xfa}, {&(0x7f0000003f40)="c727de017dd7c40aecace6e104ceb4438f7a10d2b7ad40760a7b5eba330058599e84dfeeb6a991626fc08119694f20b79e2f549abfc8b1dcd344a6a1742f29ae234c204521ff67d98c46431d08e8b43e4a48c198c855e2af94aaf39730611d6045f1cb5c48c471333503185b46e9c382cbc4650e07d374de19", 0x79}, {&(0x7f0000003fc0)="ab7e84d20e4b471f0bdc7ddeb0c7467530a1130953b2495f0b3540683fde7a62f9fe12f2e2627b4fc39654f0b222772933f0d4b1f9cfd9c364bd5f8bda0a5e141ff84d1cc49223ec3e57753e566a88ef42ad451d01de04289bb9fe5b8a9def855c285831f66ab1e230c41a71caaf194beda77b766636c5dd039e3f36cdbb8deb7c6b3e9b4318", 0x86}, {&(0x7f0000004080)="8879c494bb461412c29bb6bc9e338de97c47510ea6d7856be611dc9e70e14e2ad0d3afe4e0c1906051cb7039c2", 0x2d}], 0x4, &(0x7f0000004100)={0x108, 0x117, 0x6, "61489965fc7d0eb1bbfbdcf5bb9b709064d0fe7168c293b387bf0ff6067eb514a7adb8a84255509694cddf51fc12410b4212dbe6831fa25725d38c41f1ca9c294d43bd32e581e1a27fc0279e984b4cdbdada71902e31b51e26a7e395357e4372cc3360252a7d5f55a16a788288278731479c3dbec3fdad4d3bf0838448540d4e1f7f871b2a2c09d24cef364303b2ca48d40e52de6ee219a54096213663d810cab9ffcb55bbd6d6462c8ed08b99eac012339c051386f7c4d51bd5f2eb950aec8990929559a0fc739d01308ab936893a5dd2f81cf20bc23558077039e273ea755f1f5d0dc56ec56df0043cc8fb909ac6a7ff58aeae16"}, 0x108, 0x4000001}], 0x7, 0x17f9babd131f72df) r1 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f000044f000)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f00000001c0)=0x8ec, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000180), 0xfc70) listen(r1, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffd71dee09629611ffffff86dd60d8652b00140600fe8000000000000000000000000000aafe8000000000000000100000000000aa00004e20", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500a000090780000"], &(0x7f00000002c0)) [ 183.648515] FAULT_INJECTION: forcing a failure. [ 183.648515] name failslab, interval 1, probability 0, space 0, times 0 [ 183.659814] CPU: 1 PID: 10955 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 183.668320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 183.677673] Call Trace: [ 183.680267] dump_stack+0x1c9/0x2b4 [ 183.683899] ? dump_stack_print_info.cold.2+0x52/0x52 [ 183.689084] ? save_stack+0x43/0xd0 [ 183.692699] ? kasan_kmalloc+0xc4/0xe0 [ 183.696586] ? kmem_cache_alloc+0x12e/0x760 [ 183.700905] should_fail.cold.4+0xa/0x11 [ 183.704964] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.710319] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 183.715423] ? lock_downgrade+0x8f0/0x8f0 [ 183.719568] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 183.724223] ? __vma_adjust+0x6a7/0x1840 [ 183.728279] ? lock_downgrade+0x8f0/0x8f0 [ 183.732411] ? lock_release+0xa30/0xa30 [ 183.736374] ? check_same_owner+0x340/0x340 [ 183.740793] ? percpu_ref_put_many+0x131/0x240 [ 183.745362] ? lock_acquire+0x1e4/0x540 [ 183.749321] ? fs_reclaim_acquire+0x20/0x20 [ 183.753636] ? lock_downgrade+0x8f0/0x8f0 [ 183.757768] ? up_read+0x110/0x110 [ 183.761303] ? check_same_owner+0x340/0x340 [ 183.765628] ? rcu_note_context_switch+0x730/0x730 [ 183.770570] __should_failslab+0x124/0x180 [ 183.774906] should_failslab+0x9/0x14 [ 183.778692] kmem_cache_alloc+0x2af/0x760 [ 183.782823] __split_vma+0x115/0x7f0 [ 183.786531] ? find_vma_prev+0x140/0x140 [ 183.790581] ? vmacache_update+0x10e/0x140 [ 183.794807] ? find_vma+0x34/0x190 [ 183.798328] do_munmap+0x377/0xf90 [ 183.801878] mmap_region+0x79b/0x1da0 [ 183.805685] ? __x64_sys_brk+0x7a0/0x7a0 [ 183.809742] ? lock_release+0xa30/0xa30 [ 183.813716] ? check_same_owner+0x340/0x340 [ 183.818042] ? __check_object_size+0xa3/0x5d7 [ 183.822541] ? lock_acquire+0x1e4/0x540 [ 183.826516] ? get_pid_task+0xd8/0x1a0 [ 183.830391] ? mpx_unmapped_area_check+0xd8/0x108 [ 183.835219] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 183.840674] ? arch_get_unmapped_area+0x770/0x770 [ 183.845499] ? lock_acquire+0x1e4/0x540 [ 183.849456] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 183.854460] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.859988] ? can_do_mlock+0x10a/0x160 [ 183.863958] ? can_do_mlock.part.10+0x20/0x20 [ 183.868447] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 183.873976] ? get_unmapped_area+0x292/0x3b0 [ 183.878372] do_mmap+0xa10/0x1220 [ 183.881808] ? mmap_region+0x1da0/0x1da0 [ 183.885861] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 183.889909] ? down_read_killable+0x200/0x200 [ 183.894404] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 183.899935] ? security_mmap_file+0x166/0x1b0 [ 183.904411] vm_mmap_pgoff+0x213/0x2c0 [ 183.908283] ? vma_is_stack_for_current+0xd0/0xd0 [ 183.913109] ksys_mmap_pgoff+0x4da/0x660 [ 183.917156] ? find_mergeable_anon_vma+0xd0/0xd0 [ 183.921901] ? __ia32_sys_read+0xb0/0xb0 [ 183.925947] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 183.931471] __x64_sys_mmap+0xe9/0x1b0 [ 183.935347] do_syscall_64+0x1b9/0x820 [ 183.939214] ? finish_task_switch+0x1d3/0x870 [ 183.943690] ? syscall_return_slowpath+0x5e0/0x5e0 [ 183.948601] ? syscall_return_slowpath+0x31d/0x5e0 [ 183.953510] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 183.958508] ? prepare_exit_to_usermode+0x291/0x3b0 [ 183.963514] ? perf_trace_sys_enter+0xb10/0xb10 [ 183.968179] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 183.973013] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 183.978199] RIP: 0033:0x455ab9 [ 183.981382] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:25:25 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:25 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:25 executing program 2 (fault-call:4 fault-nth:3): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x7, @loopback={0x0, 0x1}}, 0x1c) [ 184.000563] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.008261] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 184.015536] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 [ 184.022798] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 184.030057] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 184.037397] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000002 [ 184.133621] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 184.162592] kernel msg: ebtables bug: please report to author: Hook order must be followed [ 184.218063] FAULT_INJECTION: forcing a failure. [ 184.218063] name failslab, interval 1, probability 0, space 0, times 0 [ 184.229656] CPU: 0 PID: 10983 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 184.238172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.247525] Call Trace: [ 184.250111] dump_stack+0x1c9/0x2b4 [ 184.253728] ? dump_stack_print_info.cold.2+0x52/0x52 [ 184.258992] ? kasan_check_read+0x11/0x20 [ 184.263139] ? rcu_is_watching+0x8c/0x150 [ 184.267276] should_fail.cold.4+0xa/0x11 [ 184.271339] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 184.276432] ? kernel_text_address+0x79/0xf0 [ 184.280829] ? __kernel_text_address+0xd/0x40 [ 184.285319] ? unwind_get_return_address+0x61/0xa0 [ 184.290236] ? __save_stack_trace+0x8d/0xf0 [ 184.294559] ? save_stack+0xa9/0xd0 [ 184.298167] ? save_stack+0x43/0xd0 [ 184.301794] ? kasan_kmalloc+0xc4/0xe0 [ 184.305661] ? kasan_slab_alloc+0x12/0x20 [ 184.309793] ? kmem_cache_alloc+0x12e/0x760 [ 184.314125] ? __split_vma+0x115/0x7f0 [ 184.318005] ? do_munmap+0x377/0xf90 [ 184.321717] ? mmap_region+0x79b/0x1da0 [ 184.325695] ? do_mmap+0xa10/0x1220 [ 184.329333] ? vm_mmap_pgoff+0x213/0x2c0 [ 184.333379] ? ksys_mmap_pgoff+0x4da/0x660 [ 184.337606] ? __x64_sys_mmap+0xe9/0x1b0 [ 184.341663] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.347016] ? lock_acquire+0x1e4/0x540 [ 184.350991] ? lock_downgrade+0x8f0/0x8f0 [ 184.355140] ? lock_release+0xa30/0xa30 [ 184.359109] ? memcg_kmem_get_cache+0x3a9/0x9d0 [ 184.363772] __should_failslab+0x124/0x180 [ 184.367994] should_failslab+0x9/0x14 [ 184.371788] kmem_cache_alloc+0x47/0x760 [ 184.375843] ? percpu_ref_put_many+0x131/0x240 [ 184.380411] anon_vma_clone+0x140/0x740 [ 184.384377] ? unlink_anon_vmas+0xa60/0xa60 [ 184.388678] __split_vma+0x313/0x7f0 [ 184.392373] ? find_vma_prev+0x140/0x140 [ 184.396414] ? find_vma+0x34/0x190 [ 184.399940] do_munmap+0x377/0xf90 [ 184.403471] ? run_rebalance_domains+0x4c0/0x4c0 [ 184.408217] mmap_region+0x79b/0x1da0 [ 184.412000] ? lock_downgrade+0x8f0/0x8f0 [ 184.416133] ? finish_task_switch+0x18a/0x870 [ 184.420610] ? __x64_sys_brk+0x7a0/0x7a0 [ 184.424659] ? compat_start_thread+0x80/0x80 [ 184.429057] ? trace_hardirqs_on+0xd/0x10 [ 184.433197] ? _raw_spin_unlock_irq+0x27/0x70 [ 184.437682] ? finish_task_switch+0x1d3/0x870 [ 184.442157] ? finish_task_switch+0x18a/0x870 [ 184.446648] ? mpx_unmapped_area_check+0xd8/0x108 [ 184.451506] ? arch_get_unmapped_area_topdown+0xc2/0x940 [ 184.456951] ? lock_repin_lock+0x430/0x430 [ 184.461179] ? arch_get_unmapped_area+0x770/0x770 [ 184.466031] ? lock_acquire+0x1e4/0x540 [ 184.470000] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 184.475009] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.480538] ? can_do_mlock+0x10a/0x160 [ 184.484504] ? can_do_mlock.part.10+0x20/0x20 [ 184.488986] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 184.494517] ? get_unmapped_area+0x292/0x3b0 [ 184.498910] do_mmap+0xa10/0x1220 [ 184.502354] ? mmap_region+0x1da0/0x1da0 [ 184.506592] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 184.510635] ? down_read_killable+0x200/0x200 [ 184.515111] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.520637] ? security_mmap_file+0x166/0x1b0 [ 184.525126] vm_mmap_pgoff+0x213/0x2c0 [ 184.529008] ? vma_is_stack_for_current+0xd0/0xd0 [ 184.533856] ? __schedule+0x1ea0/0x1ea0 [ 184.537836] ksys_mmap_pgoff+0x4da/0x660 [ 184.541886] ? find_mergeable_anon_vma+0xd0/0xd0 [ 184.546631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 184.552163] ? exit_to_usermode_loop+0x1f4/0x380 [ 184.556916] ? syscall_slow_exit_work+0x500/0x500 [ 184.561743] __x64_sys_mmap+0xe9/0x1b0 [ 184.565614] do_syscall_64+0x1b9/0x820 [ 184.569483] ? finish_task_switch+0x1d3/0x870 [ 184.573960] ? syscall_return_slowpath+0x5e0/0x5e0 [ 184.578882] ? syscall_return_slowpath+0x31d/0x5e0 [ 184.583798] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 184.588796] ? prepare_exit_to_usermode+0x291/0x3b0 [ 184.593800] ? perf_trace_sys_enter+0xb10/0xb10 [ 184.598454] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 184.603298] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.608470] RIP: 0033:0x455ab9 [ 184.611645] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 184.630852] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 184.638546] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 184.645803] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 [ 184.653078] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 184.660338] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 184.667599] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000003 04:25:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:26 executing program 0: bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha384-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f00000000c0), 0xbe) setrlimit(0x7, &(0x7f0000000040)={0x14, 0x87}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$can_raw(0x1d, 0x3, 0x1) openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x2, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200, 0x40) ioctl$EVIOCRMFF(r0, 0x40044581, &(0x7f0000000140)=0x101) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x1}}, 0x20) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000000180)={'bridge_slave_1\x00', 0x7f}) write$RDMA_USER_CM_CMD_RESOLVE_IP(r0, &(0x7f00000000c0)={0x3, 0x40, 0xfa00, {{0xa, 0x4e20, 0x1}, {0xa, 0x4e22, 0x7, @remote={0xfe, 0x80, [], 0xbb}}, r1, 0x5}}, 0x48) 04:25:26 executing program 2 (fault-call:4 fault-nth:4): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000100)='/dev/snd/seq\x00', 0x0, 0x0) read(r0, &(0x7f0000fb6000)=""/28, 0x3f0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000240)={0xbf}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0x40a85321, &(0x7f00000002c0)={{}, 'port1\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) write$binfmt_elf64(r1, &(0x7f0000000300)=ANY=[], 0x303) ioctl$SG_IO(r1, 0x2285, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, @buffer={0x0, 0xe9, &(0x7f0000000080)=""/233}, &(0x7f0000000180), &(0x7f0000000240)=""/126, 0x0, 0x0, 0x0, &(0x7f00000002c0)}) write$binfmt_elf64(r1, &(0x7f0000000400)=ANY=[@ANYBLOB="7f454c4600000000000000000000000000000000000000000000000000000000400000000000000000000000002000000000000000003800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f9ffffffffffffff0000000000"], 0x78) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = gettid() timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x9}}, &(0x7f0000040000)) tkill(r3, 0x1000000000013) 04:25:26 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) close(r0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r2 = accept$alg(r1, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') recvmmsg(r1, &(0x7f0000000900)=[{{&(0x7f0000000180)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000280)=""/68, 0x44}, {&(0x7f0000000300)=""/35, 0x23}, {&(0x7f0000000340)=""/203, 0xcb}, {&(0x7f0000000440)=""/170, 0xaa}, {&(0x7f0000000500)=""/216, 0xd8}], 0x5, &(0x7f0000000680)=""/165, 0xa5, 0x20}, 0x6}, {{&(0x7f0000000740)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff}}, 0x80, &(0x7f0000000840)=[{&(0x7f00000007c0)=""/18, 0x12}, {&(0x7f0000000800)=""/5, 0x5}], 0x2, &(0x7f0000000880)=""/72, 0x48, 0x5}, 0x800}], 0x2, 0x10000, &(0x7f0000000980)) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000009c0)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000ac0)=0xe8) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffff9c, 0x0, 0x11, &(0x7f0000000b00)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000c00)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000d00)={'vcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000d40)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000001180)={'vlan0\x00', 0x0}) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@remote, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@rand_addr}}, &(0x7f00000012c0)=0xe8) fcntl$getownex(r1, 0x10, &(0x7f0000000c40)={0x0, 0x0}) getsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000c80), &(0x7f0000000cc0)=0x4) sched_getscheduler(r13) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffff9c, 0x29, 0x23, &(0x7f0000001300)={{{@in6=@ipv4={[], [], @loopback}, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@mcast1}}, &(0x7f0000001400)=0xe8) recvmmsg(r2, &(0x7f0000003840)=[{{&(0x7f00000014c0)=@nfc_llcp, 0x80, &(0x7f0000001540), 0x0, &(0x7f0000001580)=""/187, 0xbb, 0x1}, 0x2}, {{&(0x7f0000001640)=@hci={0x0, 0x0}, 0x80, &(0x7f0000001880)=[{&(0x7f00000016c0)=""/216, 0xd8}, {&(0x7f00000017c0)=""/76, 0x4c}, {&(0x7f0000001840)=""/9, 0x9}], 0x3, &(0x7f00000018c0)=""/38, 0x26, 0x9}, 0xffffffffffffdf93}, {{&(0x7f0000001900)=@in6={0x0, 0x0, 0x0, @mcast2}, 0x80, &(0x7f0000002b80)=[{&(0x7f0000001980)=""/117, 0x75}, {&(0x7f0000001a00)=""/8, 0x8}, {&(0x7f0000001a40)=""/169, 0xa9}, {&(0x7f0000001b00)=""/4096, 0x1000}, {&(0x7f0000002b00)=""/89, 0x59}], 0x5, &(0x7f0000002c00)=""/111, 0x6f, 0x800}, 0xfff}, {{&(0x7f0000002c80)=@l2, 0x80, &(0x7f0000002e00)=[{&(0x7f0000002d00)=""/195, 0xc3}], 0x1, &(0x7f0000002e40)=""/145, 0x91, 0x2}, 0x4}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f00)=""/15, 0xf}, {&(0x7f0000002f40)=""/219, 0xdb}], 0x2, &(0x7f0000003080)=""/178, 0xb2, 0x80000000}, 0xffffffff80000001}, {{&(0x7f0000003140)=@nfc, 0x80, &(0x7f00000036c0)=[{&(0x7f00000031c0)=""/3, 0x3}, {&(0x7f0000003200)=""/168, 0xa8}, {&(0x7f00000032c0)=""/135, 0x87}, {&(0x7f0000003380)=""/230, 0xe6}, {&(0x7f0000003480)=""/94, 0x5e}, {&(0x7f0000003500)=""/222, 0xde}, {&(0x7f0000003600)=""/144, 0x90}], 0x7, &(0x7f0000003740)=""/194, 0xc2, 0x6}, 0xc3}], 0x6, 0x21, 0x0) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000003a00)={@empty, 0x0}, &(0x7f0000003a40)=0x14) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000003f40)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000003f00)={&(0x7f0000003f80)=ANY=[@ANYBLOB="58040000", @ANYRES16=r4, @ANYBLOB="20002dbd7000fcdbdf250000000008000100", @ANYRES32=r5, @ANYBLOB="f40102003c00010024000100757365725f6c696e6b757000000000000000000000000000000000000000000008000300060000000400040008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d636173745f72656a6f696e5f636f756e7400000000000000000000000000000800030003000000080004000100000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000000000008000600", @ANYRES32=r8, @ANYBLOB="4c000100240001006c625f74785f6d6574686f64000000000000000000000000000000000000000008000300050000001c000400686173685f746f5f706f72745f6d617070696e670000000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000080000008000600", @ANYRES32=r9, @ANYBLOB="38000100240001006e6f746966795f70656572735f636f756e7400000000000000000000000000000800030003000000080004000900000038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000000000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e000000080004000600000008000600", @ANYRES32=r10, @ANYBLOB="d8b34ab0c335c6e9ff573d933b81500e9770f363b2dd3f743e2f23aa35b05e1085ad73cc2ef9da5cfd555b8606071c01f7848345c9a63d9a4b16b6b4d7912d93db704437489bb60efa0e50cf12d0a2dc9065adc10d", @ANYRES32=r11, @ANYBLOB="f400020038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000800000040000100240001007072696f72697479000000000000000000000000000000000000000000000000080003000e0000000800040065d4000008000600", @ANYRES32=r12, @ANYBLOB="38000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000800000040000100240001006d6f6465000000000000000000000000000000000000000000000000000000000800030005000000100004006c6f616462616c616e63650008000100", @ANYRES32=r14, @ANYBLOB="4401020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000600000008000600", @ANYRES32=r15, @ANYBLOB="44000100240001006270665f686173685f66756e6300000000000000000000000000000000000000080003000b0000001400040009006e5504000000ffff00060100000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b0000000800040008000000080007000000000040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000180000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r16], 0x458}, 0x1, 0x0, 0x0, 0x14}, 0x40) getsockopt$bt_l2cap_L2CAP_LM(r6, 0x6, 0x3, &(0x7f0000000d80), &(0x7f0000000dc0)=0x4) io_setup(0x1, &(0x7f0000e4b000)=0x0) io_submit(r17, 0x1fa, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000000)="a5518f8dee115bb3994327b71b6ac2f49b320b76a9dfb00af0438eaf8f0ed0a8e2db6f814a40426a373d6c03c8be3db55b53500d678525990cded4038b156036f3c207dc4160daf0d1361a21d50b1d241a8776238c579991d4fd0c6f276b1138bc762569c41ad34ad5", 0x69}]) 04:25:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff00000000000000, @loopback={0x0, 0x1}}, 0x1c) [ 184.867575] FAULT_INJECTION: forcing a failure. [ 184.867575] name failslab, interval 1, probability 0, space 0, times 0 [ 184.878922] CPU: 1 PID: 10997 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 184.887410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 184.896772] Call Trace: [ 184.899355] dump_stack+0x1c9/0x2b4 [ 184.902986] ? dump_stack_print_info.cold.2+0x52/0x52 [ 184.908194] should_fail.cold.4+0xa/0x11 [ 184.912271] ? fault_create_debugfs_attr+0x1f0/0x1f0 04:25:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xbd02000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:26 executing program 0: r0 = socket$inet6(0xa, 0x5, 0x2) r1 = openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/snapshot\x00', 0x2, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000100)={0x1, 0x8, 0x0, 0x6, 0x8}, 0x14) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x0, 0x1}}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x90) [ 184.917385] ? __kasan_slab_free+0x11a/0x170 [ 184.921797] ? kasan_slab_free+0xe/0x10 [ 184.925791] ? kmem_cache_free+0x86/0x2d0 [ 184.929932] ? remove_vma+0x15a/0x1a0 [ 184.933715] ? do_munmap+0x743/0xf90 [ 184.937425] ? mmap_region+0x79b/0x1da0 [ 184.941395] ? do_mmap+0xa10/0x1220 [ 184.945014] ? ksys_mmap_pgoff+0x4da/0x660 [ 184.949254] ? __x64_sys_mmap+0xe9/0x1b0 [ 184.953326] ? do_syscall_64+0x1b9/0x820 [ 184.957392] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 184.962758] ? kasan_check_read+0x11/0x20 [ 184.966892] ? do_raw_spin_unlock+0xa7/0x2f0 [ 184.971299] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 184.975888] ? kasan_check_write+0x14/0x20 [ 184.980127] ? do_raw_spin_lock+0xc1/0x200 [ 184.985068] ? lock_acquire+0x1e4/0x540 [ 184.989049] ? fs_reclaim_acquire+0x20/0x20 [ 184.993377] ? lock_downgrade+0x8f0/0x8f0 [ 184.997520] ? quarantine_put+0x10d/0x1b0 [ 185.001666] ? check_same_owner+0x340/0x340 [ 185.005987] ? rcu_note_context_switch+0x730/0x730 [ 185.010920] __should_failslab+0x124/0x180 [ 185.015142] should_failslab+0x9/0x14 [ 185.018929] kmem_cache_alloc+0x2af/0x760 [ 185.023065] mmap_region+0xae9/0x1da0 [ 185.026851] ? __x64_sys_brk+0x7a0/0x7a0 [ 185.030909] ? perf_trace_lock+0x920/0x920 [ 185.035141] ? __check_object_size+0xa3/0x5d7 [ 185.039628] ? lock_acquire+0x1e4/0x540 [ 185.043582] ? get_pid_task+0xd8/0x1a0 [ 185.047457] ? mpx_unmapped_area_check+0xd8/0x108 [ 185.052294] ? arch_get_unmapped_area+0x770/0x770 [ 185.057120] ? lock_acquire+0x1e4/0x540 [ 185.061079] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 185.066077] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.071604] ? can_do_mlock+0x10a/0x160 [ 185.075574] ? can_do_mlock.part.10+0x20/0x20 [ 185.080056] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.085576] ? get_unmapped_area+0x292/0x3b0 [ 185.089974] do_mmap+0xa10/0x1220 [ 185.093417] ? mmap_region+0x1da0/0x1da0 [ 185.097458] ? vm_mmap_pgoff+0x1b5/0x2c0 [ 185.102200] ? down_read_killable+0x200/0x200 [ 185.106682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 185.112206] ? security_mmap_file+0x166/0x1b0 [ 185.116685] vm_mmap_pgoff+0x213/0x2c0 [ 185.120561] ? vma_is_stack_for_current+0xd0/0xd0 [ 185.125397] ksys_mmap_pgoff+0x4da/0x660 [ 185.129445] ? find_mergeable_anon_vma+0xd0/0xd0 [ 185.134193] ? __ia32_sys_read+0xb0/0xb0 [ 185.138245] ? syscall_slow_exit_work+0x500/0x500 [ 185.143073] __x64_sys_mmap+0xe9/0x1b0 [ 185.146950] do_syscall_64+0x1b9/0x820 [ 185.150830] ? finish_task_switch+0x1d3/0x870 [ 185.155316] ? syscall_return_slowpath+0x5e0/0x5e0 [ 185.160230] ? syscall_return_slowpath+0x31d/0x5e0 [ 185.165144] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 185.170147] ? prepare_exit_to_usermode+0x291/0x3b0 [ 185.175156] ? perf_trace_sys_enter+0xb10/0xb10 [ 185.179811] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.184644] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.189819] RIP: 0033:0x455ab9 [ 185.192991] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 04:25:26 executing program 3: bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000100)={&(0x7f0000000080)='./file0\x00'}, 0x10) r0 = syz_open_dev$audion(&(0x7f00000000c0)='/dev/audio#\x00', 0xfffffffffffffffd, 0x40000) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, &(0x7f0000000000)=0x6, 0x4) ioctl$PERF_EVENT_IOC_ID(r0, 0x80082407, &(0x7f0000000040)) getpgid(0x0) 04:25:26 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 185.212272] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.219964] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 185.227217] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 [ 185.234468] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 185.241805] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 185.249058] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000004 04:25:26 executing program 2 (fault-call:4 fault-nth:5): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x40000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:26 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:26 executing program 0: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = accept$alg(r2, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f00000004c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x2f5}], 0x30}, 0x0) write$binfmt_script(r3, &(0x7f0000000300)=ANY=[], 0xffffffaa) readv(r3, &(0x7f0000000400)=[{&(0x7f0000000140)=""/25, 0x19}, {&(0x7f00000013c0)=""/4096, 0x1000}], 0x2) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID(r4, 0x4008ae8a, &(0x7f00000000c0)=ANY=[@ANYBLOB="05000000000000000d0000400500000005000000000100000000004000000000010000000000000025000000ffffffff00040000000000000a00000006ed"]) ioctl$KVM_SET_MSRS(r4, 0xc008ae88, &(0x7f0000000080)={0x1, 0x0, [{0xc1}]}) [ 185.406454] FAULT_INJECTION: forcing a failure. [ 185.406454] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 185.418402] CPU: 0 PID: 11029 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 185.426883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.436226] Call Trace: [ 185.438808] dump_stack+0x1c9/0x2b4 [ 185.442418] ? dump_stack_print_info.cold.2+0x52/0x52 [ 185.447597] should_fail.cold.4+0xa/0x11 [ 185.451638] ? kasan_slab_alloc+0x12/0x20 [ 185.455775] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 185.460862] ? do_filp_open+0x255/0x380 [ 185.464818] ? do_sys_open+0x584/0x720 [ 185.468706] ? do_syscall_64+0x1b9/0x820 [ 185.472759] ? trace_hardirqs_on+0x10/0x10 [ 185.476983] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 185.481985] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 185.486735] ? lock_acquire+0x1e4/0x540 [ 185.490711] ? fs_reclaim_acquire+0x20/0x20 [ 185.495022] ? lock_downgrade+0x8f0/0x8f0 [ 185.499250] ? check_same_owner+0x340/0x340 [ 185.503559] ? rcu_note_context_switch+0x730/0x730 [ 185.508474] ? trace_hardirqs_on+0x10/0x10 [ 185.512697] __alloc_pages_nodemask+0x36e/0xdb0 [ 185.517359] ? unwind_get_return_address+0x61/0xa0 [ 185.522293] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 185.527298] ? trace_hardirqs_on+0x10/0x10 [ 185.531518] ? save_stack+0xa9/0xd0 [ 185.535142] ? kmem_cache_free+0x86/0x2d0 [ 185.539284] ? unlink_anon_vmas+0x3b2/0xa60 [ 185.543593] ? free_pgtables+0xe6/0x380 [ 185.547555] ? unmap_region+0x3d8/0x570 [ 185.551518] ? do_munmap+0x617/0xf90 [ 185.555229] ? mmap_region+0x79b/0x1da0 [ 185.559216] ? do_mmap+0xa10/0x1220 [ 185.562841] ? vm_mmap_pgoff+0x213/0x2c0 [ 185.566883] ? ksys_mmap_pgoff+0x4da/0x660 [ 185.571098] ? __x64_sys_mmap+0xe9/0x1b0 [ 185.575150] ? do_syscall_64+0x1b9/0x820 [ 185.579209] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.584575] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 185.590122] alloc_pages_current+0x10c/0x210 [ 185.594613] pte_alloc_one+0x1b/0x1a0 [ 185.598403] __pte_alloc+0x2a/0x3c0 [ 185.602034] alloc_set_pte+0x129b/0x1790 [ 185.606090] ? do_swap_page+0x2280/0x2280 [ 185.610235] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 185.615759] ? __do_fault+0x222/0x450 [ 185.619543] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 185.624640] ? kernel_text_address+0x79/0xf0 [ 185.629047] ? pud_val+0x88/0x100 [ 185.632488] finish_fault+0x179/0x2d0 [ 185.636275] __handle_mm_fault+0x2cfe/0x44a0 [ 185.640673] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 185.645507] ? follow_page_mask+0x188/0x1ce0 [ 185.649898] ? save_stack+0x43/0xd0 [ 185.653529] ? lock_acquire+0x1e4/0x540 04:25:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:27 executing program 3: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(r0, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000700), 0x0, &(0x7f0000000740)=""/18, 0x12}}], 0x1, 0x0, &(0x7f0000000840)) r1 = fcntl$dupfd(r0, 0x0, r0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f0000000040)=0x12, 0xfffffffffffffcd0) bind$bt_rfcomm(r1, &(0x7f0000000080)={0x1f, {0xffffffffffffffff, 0xffffffff, 0x2}}, 0xa) [ 185.657505] ? handle_mm_fault+0x417/0xc80 [ 185.661744] ? lock_downgrade+0x8f0/0x8f0 [ 185.665900] ? lock_release+0xa30/0xa30 [ 185.669871] ? lock_downgrade+0x8f0/0x8f0 [ 185.674015] ? mem_cgroup_from_task+0xcb/0x1f0 [ 185.678601] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 185.683361] ? uprobe_apply+0x140/0x140 [ 185.687333] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 185.692862] handle_mm_fault+0x53e/0xc80 [ 185.696914] ? __handle_mm_fault+0x44a0/0x44a0 [ 185.701478] ? check_same_owner+0x340/0x340 [ 185.705784] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 185.710784] __get_user_pages+0x826/0x1ad0 [ 185.715009] ? follow_page_mask+0x1ce0/0x1ce0 [ 185.719502] ? __x64_sys_brk+0x7a0/0x7a0 [ 185.723545] ? lock_release+0xa30/0xa30 [ 185.727503] ? check_same_owner+0x340/0x340 [ 185.731805] ? lock_acquire+0x1e4/0x540 [ 185.735762] ? __mm_populate+0x31a/0x4d0 [ 185.739815] ? lock_release+0xa30/0xa30 [ 185.743773] ? check_same_owner+0x340/0x340 [ 185.748627] ? mpx_unmapped_area_check+0xd8/0x108 [ 185.753451] ? rcu_note_context_switch+0x730/0x730 [ 185.758371] populate_vma_page_range+0x2db/0x3d0 [ 185.763115] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 185.768033] ? find_vma+0x34/0x190 [ 185.771565] __mm_populate+0x286/0x4d0 [ 185.775448] ? populate_vma_page_range+0x3d0/0x3d0 [ 185.780370] ? down_read_killable+0x200/0x200 [ 185.784861] ? security_mmap_file+0x166/0x1b0 [ 185.789349] vm_mmap_pgoff+0x27f/0x2c0 [ 185.793220] ? vma_is_stack_for_current+0xd0/0xd0 [ 185.798060] ksys_mmap_pgoff+0x4da/0x660 [ 185.802111] ? find_mergeable_anon_vma+0xd0/0xd0 [ 185.806850] ? __ia32_sys_read+0xb0/0xb0 [ 185.810897] ? syscall_slow_exit_work+0x500/0x500 [ 185.815727] __x64_sys_mmap+0xe9/0x1b0 [ 185.819609] do_syscall_64+0x1b9/0x820 [ 185.823478] ? syscall_slow_exit_work+0x500/0x500 [ 185.828316] ? syscall_return_slowpath+0x5e0/0x5e0 [ 185.833244] ? syscall_return_slowpath+0x31d/0x5e0 [ 185.838166] ? prepare_exit_to_usermode+0x291/0x3b0 [ 185.843198] ? perf_trace_sys_enter+0xb10/0xb10 [ 185.847850] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 185.852676] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 185.857845] RIP: 0033:0x455ab9 [ 185.861012] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 185.880161] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 185.887864] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 185.895124] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 04:25:27 executing program 2 (fault-call:4 fault-nth:6): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 185.902378] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 185.909641] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 185.916899] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000005 04:25:27 executing program 5: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f00008f0000)='/dev/ptmx\x00', 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000532000)=0x19) ppoll(&(0x7f0000000180)=[{r2}, {r1}, {r2}], 0x3, &(0x7f00000001c0), &(0x7f0000000200), 0x8) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x20, 0x4, 0xffffffffffffffff}) 04:25:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5030000, @loopback={0x0, 0x1}}, 0x1c) [ 186.172527] FAULT_INJECTION: forcing a failure. [ 186.172527] name failslab, interval 1, probability 0, space 0, times 0 [ 186.183851] CPU: 0 PID: 11062 Comm: syz-executor2 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 186.192333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.201675] Call Trace: [ 186.204255] dump_stack+0x1c9/0x2b4 [ 186.207888] ? dump_stack_print_info.cold.2+0x52/0x52 [ 186.213075] ? lock_release+0xa30/0xa30 [ 186.217045] should_fail.cold.4+0xa/0x11 [ 186.221093] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 186.226184] ? percpu_ref_put_many+0x131/0x240 [ 186.230767] ? mem_cgroup_id_get_online+0x310/0x310 [ 186.235780] ? check_same_owner+0x340/0x340 [ 186.240090] ? rcu_note_context_switch+0x730/0x730 [ 186.245016] ? memcg_kmem_charge+0x1c2/0x300 [ 186.249430] ? __alloc_pages_nodemask+0x6e3/0xdb0 [ 186.254290] ? lock_acquire+0x1e4/0x540 [ 186.258260] ? fs_reclaim_acquire+0x20/0x20 [ 186.262578] ? lock_downgrade+0x8f0/0x8f0 [ 186.266718] ? check_same_owner+0x340/0x340 [ 186.271031] ? rcu_note_context_switch+0x730/0x730 [ 186.275963] ? unlink_anon_vmas+0x3b2/0xa60 [ 186.280275] ? free_pgtables+0xe6/0x380 [ 186.284254] __should_failslab+0x124/0x180 [ 186.288478] should_failslab+0x9/0x14 [ 186.292274] kmem_cache_alloc+0x2af/0x760 [ 186.296411] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 186.301933] ptlock_alloc+0x20/0x80 [ 186.305548] pte_alloc_one+0x6b/0x1a0 [ 186.309340] __pte_alloc+0x2a/0x3c0 [ 186.312958] alloc_set_pte+0x129b/0x1790 [ 186.317013] ? do_swap_page+0x2280/0x2280 [ 186.321169] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 186.326689] ? __do_fault+0x222/0x450 [ 186.330473] ? pmd_devmap_trans_unstable+0x1d0/0x1d0 [ 186.335569] ? kernel_text_address+0x79/0xf0 [ 186.339961] ? pud_val+0x88/0x100 [ 186.343406] finish_fault+0x179/0x2d0 [ 186.347203] __handle_mm_fault+0x2cfe/0x44a0 [ 186.351597] ? vmf_insert_mixed_mkwrite+0xa0/0xa0 [ 186.356427] ? follow_page_mask+0x188/0x1ce0 [ 186.360817] ? save_stack+0x43/0xd0 [ 186.364430] ? lock_acquire+0x1e4/0x540 [ 186.368390] ? handle_mm_fault+0x417/0xc80 [ 186.372632] ? lock_downgrade+0x8f0/0x8f0 [ 186.376768] ? lock_release+0xa30/0xa30 [ 186.380720] ? lock_downgrade+0x8f0/0x8f0 [ 186.384863] ? mem_cgroup_from_task+0xcb/0x1f0 [ 186.389427] ? mem_cgroup_css_online+0x3c0/0x3c0 [ 186.394164] ? uprobe_apply+0x140/0x140 [ 186.398145] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 186.403675] handle_mm_fault+0x53e/0xc80 [ 186.407725] ? __handle_mm_fault+0x44a0/0x44a0 [ 186.412315] ? check_same_owner+0x340/0x340 [ 186.416621] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 186.421630] __get_user_pages+0x826/0x1ad0 [ 186.425862] ? follow_page_mask+0x1ce0/0x1ce0 [ 186.430348] ? __x64_sys_brk+0x7a0/0x7a0 [ 186.434397] ? lock_release+0xa30/0xa30 [ 186.438355] ? check_same_owner+0x340/0x340 [ 186.442752] ? lock_acquire+0x1e4/0x540 [ 186.446711] ? __mm_populate+0x31a/0x4d0 [ 186.450755] ? lock_release+0xa30/0xa30 [ 186.454711] ? check_same_owner+0x340/0x340 [ 186.459034] ? mpx_unmapped_area_check+0xd8/0x108 [ 186.463880] ? rcu_note_context_switch+0x730/0x730 [ 186.468807] populate_vma_page_range+0x2db/0x3d0 [ 186.473549] ? get_user_pages_unlocked+0x5d0/0x5d0 [ 186.478465] ? find_vma+0x34/0x190 [ 186.481990] __mm_populate+0x286/0x4d0 [ 186.485867] ? populate_vma_page_range+0x3d0/0x3d0 [ 186.490789] ? down_read_killable+0x200/0x200 [ 186.495284] ? security_mmap_file+0x166/0x1b0 [ 186.499772] vm_mmap_pgoff+0x27f/0x2c0 [ 186.503663] ? vma_is_stack_for_current+0xd0/0xd0 [ 186.508509] ksys_mmap_pgoff+0x4da/0x660 [ 186.512575] ? find_mergeable_anon_vma+0xd0/0xd0 [ 186.517313] ? __ia32_sys_read+0xb0/0xb0 [ 186.521358] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 186.526881] __x64_sys_mmap+0xe9/0x1b0 [ 186.530768] do_syscall_64+0x1b9/0x820 [ 186.534644] ? finish_task_switch+0x1d3/0x870 [ 186.539148] ? syscall_return_slowpath+0x5e0/0x5e0 [ 186.544085] ? syscall_return_slowpath+0x31d/0x5e0 [ 186.549022] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 186.554034] ? prepare_exit_to_usermode+0x291/0x3b0 [ 186.559037] ? perf_trace_sys_enter+0xb10/0xb10 [ 186.563689] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.568524] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 186.573701] RIP: 0033:0x455ab9 [ 186.576870] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 186.596073] RSP: 002b:00007f660a0c4c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 186.603776] RAX: ffffffffffffffda RBX: 00007f660a0c56d4 RCX: 0000000000455ab9 [ 186.611030] RDX: 0000000000fffffd RSI: 0000000000003000 RDI: 0000000020ffc000 04:25:28 executing program 2 (fault-call:4 fault-nth:7): r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 186.618287] RBP: 000000000072bea0 R08: 0000000000000014 R09: 0000000000000000 [ 186.625549] R10: 0000000002002012 R11: 0000000000000246 R12: 0000000000000015 [ 186.632897] R13: 00000000004c0196 R14: 00000000004cfd90 R15: 0000000000000006 04:25:28 executing program 5: perf_event_open(&(0x7f000001d000)={0x5, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4, 0x2) setsockopt$inet_int(r0, 0x0, 0x7, &(0x7f0000000000), 0x4) 04:25:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x15554, @loopback={0x0, 0x1}}, 0x1c) 04:25:28 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:28 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x100000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:28 executing program 5: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) fcntl$dupfd(r0, 0x0, r0) mlockall(0x3) mkdir(&(0x7f000082f000)='./control\x00', 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x1) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) r3 = getpid() msgctl$MSG_STAT(0x0, 0xb, &(0x7f0000000500)=""/53) shmget(0x2, 0x3000, 0x1dfc, &(0x7f0000ffa000/0x3000)=nil) geteuid() recvmmsg(r2, &(0x7f0000001c00)=[{{&(0x7f0000000200)=@l2, 0x80, &(0x7f0000000540)=[{&(0x7f0000000340)=""/168, 0xa8}, {&(0x7f0000000400)=""/55, 0x37}], 0x2, &(0x7f0000000580)=""/8, 0x8, 0x9}, 0x3}, {{&(0x7f00000006c0)=@vsock={0x0, 0x0, 0x0, @hyper}, 0x80, &(0x7f0000000a40)=[{&(0x7f0000000740)=""/42, 0x2a}, {&(0x7f0000000780)=""/183, 0xb7}, {&(0x7f0000000840)=""/188, 0xbc}, {&(0x7f0000000900)=""/14, 0xe}, {&(0x7f0000000940)=""/231, 0xe7}], 0x5, &(0x7f0000000ac0)=""/250, 0xfa, 0x10000}, 0x7}, {{&(0x7f0000000bc0)=@alg, 0x80, &(0x7f0000001d40)=[{&(0x7f0000000c40)=""/195, 0xc3}, {&(0x7f0000000d40)=""/127, 0x7f}, {&(0x7f0000000dc0)=""/244, 0xf4}, {&(0x7f0000000ec0)=""/3, 0x3}, {&(0x7f0000000f00)=""/82, 0x52}], 0x5, &(0x7f0000001000)=""/138, 0x8a, 0x100}, 0x4626}, {{&(0x7f00000010c0)=@can, 0x80, &(0x7f0000001300)=[{&(0x7f0000001140)=""/95, 0x5f}, {&(0x7f00000011c0)=""/233, 0xe9}], 0x2, &(0x7f0000001340)=""/53, 0x35, 0x1}, 0xffffffffffffff00}, {{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f0000001380)=""/154, 0x9a}, {&(0x7f0000001440)=""/66, 0x42}, {&(0x7f00000014c0)=""/220, 0xdc}, {&(0x7f00000015c0)=""/207, 0xcf}], 0x4, &(0x7f0000001b40)=""/151, 0x97, 0x1}, 0x9}], 0x5, 0x44000022, &(0x7f0000000680)={0x0, 0x1c9c380}) sched_setattr(r3, &(0x7f0000000040)={0x30, 0x5, 0x0, 0x9, 0x4, 0x7fffffff, 0x6, 0x5}, 0x0) sendto$llc(r2, &(0x7f0000000080)="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", 0x120, 0x4, &(0x7f00000012c0)={0x1a, 0x304, 0x0, 0x3, 0x2, 0x0, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) 04:25:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:28 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000d300000000028000007a0a00ffffffff006301e601ef88d718dd822dd731071405ed26c6207712acb5b3f263f9c10f134fb210320b55bd2508400f70bc07084bf00bc32cc662411e66a9990bda4c2fa07f102f3c8464d55308a80a73681351422de1100c7369e8dc3c31c3c148047fbe892ec82e474fec90e308c8fc7240b5a03174ab86ab81489b6bc1602b826a507992884ba78772858030af71b23ca687827d4b61b7e10586b1373824bbc21503f2dc4749745ed0105d3ac3ac66938afec823fe9611cc35b0812e1d6108f0c4f2121a5cb22819052c91c013d9e5a4acf74e81e6d39037e3a29592004d5db846cd59"], &(0x7f0000000000)="47504c00bd304702525f484f89db96dd6ca64da40ff023122e60f6", 0x0, 0xce, &(0x7f0000001b80)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x10, 0x5, &(0x7f0000000040)=@framed={{0x18}, [@jmp={0x5}], {0x95}}, &(0x7f0000000080)='ler\x00', 0x80000001, 0xbb, &(0x7f0000000300)=""/187}, 0x48) 04:25:28 executing program 0: setrlimit(0x8, &(0x7f000000a000)) mprotect(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x8) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000000080), 0x8, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x2110, r0, 0x0) 04:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3002, 0xfffffd, 0x2002012, r1, 0x0) 04:25:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xacf4fb0800000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:28 executing program 3: pipe(&(0x7f0000a01ff8)) r0 = socket$inet6(0xa, 0x1000200000002, 0x3) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") faccessat(0xffffffffffffffff, &(0x7f0000000080)='./file0\x00', 0x150, 0x400) perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x5, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x200000002, 0x70, 0x100000006, 0x108000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) dup3(r1, r1, 0x7fffd) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80200000000002, &(0x7f0000000540)=0x82, 0x4) setsockopt$IP_VS_SO_SET_TIMEOUT(r2, 0x0, 0x48a, &(0x7f0000000500)={0x10001, 0x3fe, 0xe66b}, 0xfffffe9e) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x4e22, @loopback=0x7f000001}}, 0x1, 0x2, 0x3, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r2, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) sendto$inet(0xffffffffffffffff, &(0x7f0000001680), 0x0, 0x0, 0x0, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x0) sendto$inet(r2, &(0x7f0000a88f88), 0x29f, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback=0x7f000001}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @multicast1=0xe0000001}, 0x10) getegid() setgroups(0x0, &(0x7f00000000c0)) write$P9_RLERRORu(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[@ANYBLOB="0d00007d5fb024f03ef5b2c9cb"], 0xd) getsockopt$bt_hci(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000400)=""/89, &(0x7f0000000180)=0xffffffffffffff2e) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000100), 0x921b527a62bfd8af) socket$inet(0x2, 0x0, 0x0) ioctl$KDGETMODE(0xffffffffffffffff, 0x4b3b, &(0x7f00000005c0)) write$P9_RSETATTR(0xffffffffffffffff, &(0x7f0000000480)={0x7, 0x1b}, 0x7) openat$full(0xffffffffffffff9c, &(0x7f0000003a40)='/dev/full\x00', 0x0, 0x0) sysfs$1(0x1, &(0x7f0000000600)='erspan0\x00') ioctl$TIOCNXCL(0xffffffffffffffff, 0x540d) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000006c0)=ANY=[], 0x0) sendmsg$nl_generic(r2, &(0x7f0000001900)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2030}, 0xc, &(0x7f00000003c0)={&(0x7f0000000640)={0xe9c, 0x2d, 0x0, 0x70bd2b, 0x0, {}, [@nested={0xe88, 0x0, [@typed={0xe84, 0x0, @binary="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"}]}]}, 0xe9c}, 0x1}, 0x4011) recvmsg(r2, &(0x7f0000000240)={&(0x7f0000000040)=@nfc, 0x80, &(0x7f00000001c0)=[{&(0x7f0000003ac0)=""/4096, 0x1000}], 0x1, &(0x7f0000000200)=""/20, 0x14}, 0x100) 04:25:28 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) sendmsg$nl_xfrm(r0, &(0x7f0000773fc8)={&(0x7f0000450ff4)={0x10}, 0xc, &(0x7f0000ad0ff0)={&(0x7f0000b2b000)=@updsa={0xf8, 0x1a, 0x401, 0x0, 0x0, {{@in6, @in6=@mcast1={0xff, 0x1, [], 0x1}}, {@in6=@ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x0, 0x3c}, @in=@multicast1=0xe0000001, {}, {}, {}, 0x0, 0x0, 0xa}, [@tfcpad={0x8, 0x16}]}, 0xf8}, 0x1}, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x4000, 0x0) fcntl$setlease(r1, 0x400, 0x0) openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x10080, 0x0) ioctl$KDGKBTYPE(r1, 0x4b33, &(0x7f0000000080)) 04:25:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x600, @loopback={0x0, 0x1}}, 0x1c) 04:25:28 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x300a, 0xfffffd, 0x2002012, r1, 0x0) 04:25:28 executing program 0: r0 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_open_dev$sndmidi(&(0x7f0000000080)='/dev/snd/midiC#D#\x00', 0x4, 0x200400) r1 = getpid() r2 = socket$inet6(0xa, 0x1000000000001, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$inet6(0xa, 0x1, 0x0) ioctl(r3, 0x4000008912, &(0x7f0000000100)="295ee1311f16f477671070") r4 = creat(&(0x7f0000000200)='./bus\x00', 0x0) fcntl$setlease(r4, 0x400, 0x1) link(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='./file0\x00') link(&(0x7f0000000000)='./bus\x00', &(0x7f0000000180)='./file0\x00') prctl$setptracer(0x59616d61, r1) recvmsg(r2, &(0x7f0000000800)={&(0x7f00000000c0)=@pppol2tp={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/44, 0x2c}, {&(0x7f0000000200)=""/42, 0x2a}, {&(0x7f0000000400)=""/234, 0xea}, {&(0x7f0000000240)=""/53, 0x35}, {&(0x7f0000000500)=""/125, 0x7d}, {&(0x7f0000000580)=""/60, 0x3c}, {&(0x7f00000005c0)=""/216, 0xd8}], 0x7, &(0x7f0000000740)=""/172, 0xac}, 0x2000) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000a00)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a40)={'erspan0\x00', r6}) bind$bt_sco(r5, &(0x7f0000000840)={0x1f, {0x5, 0x80000000, 0xffff, 0x7, 0x1, 0x8}}, 0x8) prctl$setptracer(0x59616d61, r1) fcntl$setstatus(r0, 0x4, 0x42000) r7 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x2, 0x204000) getresuid(&(0x7f0000000a80), &(0x7f0000000ac0), &(0x7f0000000b00)) syz_mount_image$vfat(&(0x7f0000000880)='vfat\x00', &(0x7f00000008c0)='./file0\x00', 0x5, 0x1, &(0x7f0000000980)=[{&(0x7f0000000900)="04af4c985adf369b0c3badfe99da53f526111476a1d5df387c0d5fd479c2aa8ffe45a60b3f64e475edc1c12c48fd8100f2d2ab46cd3239b8799e96075923934191f528ac4f28484cf1f11c7d861b0b408138997787a1ebcdb99d52d242a7452283b0e6109d5a", 0x66, 0x5}], 0x10, &(0x7f00000009c0)={[{@nonumtail='nnonumtail=1', 0x2c}, {@numtail='nonumtail=0', 0x2c}, {@uni_xlate='uni_xlate=1', 0x2c}, {@shortname_winnt='shortname=winnt', 0x2c}]}) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r7, 0xc1105518, &(0x7f00000002c0)={{0x4, 0x3, 0x101, 0x4, 'syz0\x00', 0xff}, 0x6, 0x1, 0x7, r1, 0x3, 0x9, 'syz1\x00', &(0x7f0000000040)=['@\x00', 'posix_acl_access+(\x00', '}}^\x00'], 0x19, [], [0x401, 0x1fffffffe000, 0x2, 0x1]}) 04:25:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000, @loopback={0x0, 0x1}}, 0x1c) 04:25:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5580, @loopback={0x0, 0x1}}, 0x1c) 04:25:29 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x301e, 0xfffffd, 0x2002012, r1, 0x0) 04:25:29 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") seccomp(0x1, 0x0, &(0x7f0000028ff0)={0x1, &(0x7f00000b3000)=[{0x6, 0x0, 0x0, 0x407ffffffd}]}) timer_create(0x4, &(0x7f0000044000)={0x0, 0xfffffffffffffffe, 0x3}, &(0x7f0000000000)) exit(0x0) timer_delete(0x0) 04:25:29 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_IO(r0, 0x2285, &(0x7f0000000880)={0x53, 0x0, 0x21, 0x0, @scatter={0x0, 0x0, &(0x7f00000006c0)}, &(0x7f0000000000)="7f0000800000000000001793c6b63f1c3f1854023d858a2e8c56907eb1c1344399", &(0x7f0000000500)=""/239, 0x0, 0x0, 0x0, &(0x7f00000000c0)}) r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x400040000000000, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000100)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f00000001c0)={{0xa, 0x2, 0x400, 0x1, 'syz0\x00', 0x10001}, 0x0, 0x10, 0x7, r2, 0x8, 0x5, 'syz1\x00', &(0x7f0000000140)=['\x00', 'proc\x00', ':posix_acl_access\x00', '/dev/sg#\x00', '/dev/sg#\x00', '/dev/sg#\x00', '/dev/sg#\x00', '/dev/sg#\x00'], 0x45, [], [0x10000, 0x800, 0x80000001, 0x3]}) 04:25:29 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf401000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:29 executing program 5: remap_file_pages(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x2, 0x8, 0x20) r0 = socket$inet(0x10, 0x3, 0xc) r1 = dup2(r0, r0) ioctl$RTC_ALM_READ(r1, 0x80247008, &(0x7f0000000140)) sendmsg(r0, &(0x7f0000011fc8)={0x0, 0xfffffffffffffe35, &(0x7f0000009ff0)=[{&(0x7f0000000000)="24000000000407031dfffd946fa2830020200a0009000100001d85680c1baba20400ff7e", 0x24}], 0x1}, 0x8840) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000040)=0x0) move_pages(r2, 0x1, &(0x7f0000000080)=[&(0x7f0000ffc000/0x4000)=nil], &(0x7f00000000c0)=[0x401, 0xfffffffffffffff9, 0x7fff, 0xd9, 0x81], &(0x7f0000000100)=[0x0, 0x0], 0x6) 04:25:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 188.417982] mmap: syz-executor5 (11183) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 188.434942] sd 0:0:1:0: [sg0] tag#3641 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 188.443733] sd 0:0:1:0: [sg0] tag#3641 CDB: short variable length command, len=8 [ 188.451337] sd 0:0:1:0: [sg0] tag#3641 CDB[00]: 7f 00 00 80 00 00 00 00 00 00 17 93 c6 b6 3f 1c [ 188.460212] sd 0:0:1:0: [sg0] tag#3641 CDB[10]: 3f 18 54 02 3d 85 8a 2e 8c 56 90 7e b1 c1 34 43 [ 188.469247] sd 0:0:1:0: [sg0] tag#3641 CDB[20]: 99 [ 188.485156] sd 0:0:1:0: [sg0] tag#3642 FAILED Result: hostbyte=DID_ABORT driverbyte=DRIVER_OK [ 188.493947] sd 0:0:1:0: [sg0] tag#3642 CDB: short variable length command, len=8 [ 188.501536] sd 0:0:1:0: [sg0] tag#3642 CDB[00]: 7f 00 00 80 00 00 00 00 00 00 17 93 c6 b6 3f 1c 04:25:29 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:29 executing program 3: r0 = syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x8, 0x40800) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000940)) r1 = socket$inet6(0xa, 0x6, 0x0) ioctl(r1, 0x8912, &(0x7f0000000180)="025cc83d6d345f8f762070") r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000a40)={0x0, 0x40000000, 0x100000001, 0x7, 0xee3, 0x200, 0x6, 0x8, {0x0, @in6={{0xa, 0x4e20, 0xd2, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x401}}, 0x6, 0x6, 0x0, 0x800, 0x7}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000b00)={r4, 0x9, 0xfd6c}, &(0x7f0000000b40)=0x8) setsockopt$inet_buf(r3, 0x0, 0x2e, &(0x7f0000000840)="664d80d6cf72bceb1d61f78dd685c4ed1c068246e602d4ea65cd3edc647cfe6f461a69a7dd75d4611d6d19953b4fe6ed4ec18252b4eb7d927de3770ef8887cd074004c95c31027f155602960a1623635a836dfec1d5b484f33317fb5d8d7fae1de74b2f82e88fdbea1f9d107bbfc2648ee2dd038ca6fae48446d281f16d6e85ea436ad531812c28203d6465ace79524102d302c090865a2275de6323faa6b2a39fd87863ef23770ac8948148bdc46ffe44b0b6c2a8f97c4504df082bef6668a7dbaaa1b831894e7097f34480cee987cff944c4", 0xd3) ioctl$sock_inet6_tcp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) setsockopt$inet6_int(r1, 0x29, 0x38, &(0x7f0000311ffc)=0x1, 0x4) setsockopt$inet6_buf(r2, 0x29, 0x3e, &(0x7f00002cef88)="5780d01c", 0x4) setsockopt$sock_int(r2, 0x1, 0x29, &(0x7f00000000c0)=0x40000000000003, 0x4) sendto$inet6(r2, &(0x7f0000000280)="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", 0x5ad, 0x0, &(0x7f0000000040)={0xa, 0x4e24, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) write$FUSE_LSEEK(r0, &(0x7f0000000200)={0x18, 0x0, 0x7, {0x698}}, 0x18) recvmsg(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000), 0x0, &(0x7f0000000100)=""/80, 0x1c6}, 0x0) 04:25:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x684e000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:29 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x7ffffffff000, 0xfffffd, 0x2002012, r1, 0x0) [ 188.510442] sd 0:0:1:0: [sg0] tag#3642 CDB[10]: 3f 18 54 02 3d 85 8a 2e 8c 56 90 7e b1 c1 34 43 [ 188.519317] sd 0:0:1:0: [sg0] tag#3642 CDB[20]: 99 04:25:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x200000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1802, @loopback={0x0, 0x1}}, 0x1c) 04:25:30 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x7fffdf003000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:31 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xcb, @loopback={0x0, 0x1}}, 0x1c) 04:25:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3003, 0xfffffd, 0x2002012, r1, 0x0) 04:25:31 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:31 executing program 0: r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) setsockopt$inet6_MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f0000000140)={0x3c3, 0x1, 0x7af7, 0x2f6, 0xaa}, 0xc) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x800, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x101000, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f0000000100)={0x5000, &(0x7f0000000080), 0x4, r2, 0xd}) sendmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f00000003c0)}}, {{&(0x7f00000004c0)=@in6={0xa, 0x0, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x3, &(0x7f0000000680), 0x0, &(0x7f00000001c0)=[{0xc}], 0xc}}], 0x2, 0x0) 04:25:31 executing program 3: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='net/bnep\x00') getdents(r0, &(0x7f0000000240)=""/88, 0x58) perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3e5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) r2 = dup2(r1, r1) setsockopt$inet6_group_source_req(r2, 0x29, 0x2c, &(0x7f0000000040)={0x193, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}}}}, 0x108) 04:25:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:31 executing program 3: r0 = inotify_init1(0x4) fcntl$setown(r0, 0x8, 0xffffffffffffffff) fcntl$getownex(r0, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$setopts(0x4206, r1, 0x0, 0x0) ptrace(0x4207, r1) r2 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x0, 0x0) r3 = syz_open_dev$midi(&(0x7f0000000100)='/dev/midi#\x00', 0x7, 0x640) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000180)=[@textreal={0x8, &(0x7f0000000140)="0f01c10f060f20c06635200000000f22c067f20f5db7007800000f01c90f09f20f7c7f030f00db66b9c208000066b81700000066ba000000000f30c9", 0x3c}], 0x1, 0x11, &(0x7f00000001c0)=[@vmwrite={0x8, 0x0, 0x200, 0x0, 0xe6, 0x0, 0x6, 0x0, 0x7}], 0x1) ptrace$setregset(0x4205, r1, 0x202, &(0x7f00000000c0)={&(0x7f0000000240)}) ioctl$sock_FIOSETOWN(r0, 0x8901, &(0x7f0000000000)=r1) 04:25:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x240, @loopback={0x0, 0x1}}, 0x1c) 04:25:31 executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket(0x2, 0x2, 0x0) r2 = socket$inet6(0xa, 0x7, 0x1) ioctl(r2, 0x8912, &(0x7f00000001c0)="025cc83d6d345f8f762070") bind$inet(r1, &(0x7f0000000000)={0x2, 0x0, @broadcast=0xffffffff}, 0x10) bind$inet(r0, &(0x7f0000dc7ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/udp\x00') preadv(r3, &(0x7f0000331000)=[{&(0x7f0000723f20)=""/127, 0x7f}], 0x1, 0x102) 04:25:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3004, 0xfffffd, 0x2002012, r1, 0x0) 04:25:31 executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000280)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) r2 = accept$alg(r0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000003e80)=[{0x0, 0x0, &(0x7f0000002a80), 0x390, &(0x7f0000000100)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ppp\x00', 0x62681, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000000180)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in=@multicast1}}, &(0x7f0000001300)=0xe8) connect$packet(r3, &(0x7f0000001340)={0x11, 0x10, r4, 0x1, 0x973, 0x6, @random="37f51e3c80f2"}, 0x14) ioctl$EVIOCGKEY(r3, 0x80404518, &(0x7f0000000300)=""/4096) recvmsg(r2, &(0x7f0000000000)={&(0x7f0000000040)=@alg, 0x80, &(0x7f0000000140)=[{&(0x7f0000002840)=""/4096, 0x139f}], 0x1, &(0x7f0000fb3fa9)=""/87, 0xfffffffffffffce7}, 0x0) 04:25:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:31 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2002012, r1, 0x0) 04:25:31 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000000300)={{0x2, 0x0, @loopback=0x7f000001}, {0x4000000000000304, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa]}}, 0x7, {0x2, 0x0, @multicast1=0xe0000001}, "00000080000001000000007000"}) r2 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x800, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000040)={0x0, @in6={{0xa, 0x4e22, 0x6, @mcast2={0xff, 0x2, [], 0x1}, 0x80}}, [0x9, 0x1, 0x4e, 0x90, 0x3, 0x1, 0x6, 0x10000, 0x3, 0x6, 0x0, 0x7, 0x5, 0x579, 0x2]}, &(0x7f0000000140)=0x100) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000180)=ANY=[@ANYRES32=r3, @ANYBLOB="00000300ffff02000400"], 0xe) 04:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x8000000000000000) 04:25:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x200000, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000002c0)={0x1ff, {{0x2, 0x4e23, @multicast2=0xe0000002}}, 0x0, 0x5, [{{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}}, {{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, {{0x2, 0x4e21, @multicast1=0xe0000001}}, {{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, {{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}}]}, 0x310) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(&(0x7f0000018000)='./file0\x00', &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='ramfs\x00', 0x0, &(0x7f000000a000)) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000100)) r2 = creat(&(0x7f0000df1000)='./file0/bus\x00', 0x0) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='oom_adj\x00') write$cgroup_pid(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='0xf'], 0x3) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="a9", 0x1}], 0x1, 0x1d) creat(&(0x7f00001d3ff4)='./file0/bus\x00', 0x0) 04:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x14280000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:33 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:33 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:33 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x4032, 0xffffffffffffffff, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f0000000080)={@generic={0x0, "a712cae3fa3a9c3cf4eedf1faffc29060b8e8c0865ecdc599a34b9a910141c861a7c3508d9460e94a8877ac071a9ad3b37c55711ae7a138059ee327ee763b5ea7b8644ee48c62b2429d2724024c770c943e0e51399f8b996c744c274401af7a3cb9d4555a97878d12bc1845bc6fb47d3f8510101b59ee50d8e281b8c8016"}, {&(0x7f00000002c0)=""/4096, 0xfffffffffffffec1}, &(0x7f0000000000), 0x38}, 0xa0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x408040, 0x0) ioctl$RTC_EPOCH_SET(r2, 0x4008700e, 0x9979) 04:25:33 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5000000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:33 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket(0x2, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000180)='/dev/zero\x00', 0x8000, 0x0) ioctl$RTC_ALM_SET(r2, 0x40247007, &(0x7f00000001c0)={0x30, 0xf, 0xd, 0xb, 0x7, 0x1, 0x0, 0x13e, 0xffffffffffffffff}) setsockopt$inet_int(r1, 0x0, 0xb, &(0x7f0000ab2000)=0x1002, 0x4) setsockopt$sock_int(r1, 0x1, 0x29, &(0x7f00000002c0)=0x73, 0x4) accept4$bt_l2cap(r1, &(0x7f0000000000), &(0x7f0000000040)=0xe, 0x800) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000140)={'ip6gretap0\x00', &(0x7f0000000080)=@ethtool_link_settings={0x0, 0x9, 0x80000001, 0x20, 0xfffffffffffffffa, 0x5, 0xfdf, 0x9, 0x427c, 0x826, [0xe17, 0x3, 0xcb, 0x2, 0x2, 0x0, 0x1f, 0xc992], [0x5a20]}}) sendto$inet(r1, &(0x7f00004e9000), 0x289, 0x0, &(0x7f0000821ff0)={0x2, 0x4e20}, 0x10) recvmsg(r1, &(0x7f0000000740)={&(0x7f00000000c0)=@nl=@unspec, 0x80, &(0x7f0000000640), 0x0, &(0x7f00000006c0)=""/110, 0x6e}, 0x40012021) 04:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x200000000000000) [ 191.714242] syz-executor3 (11333): /proc/11327/oom_adj is deprecated, please use /proc/11327/oom_score_adj instead. 04:25:33 executing program 3: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") mq_open(&(0x7f0000000140)='.wlan1GPL\x00', 0x0, 0x0, &(0x7f00000001c0)) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000000)='/dev/full\x00', 0x0, 0x0) write$FUSE_OPEN(r1, &(0x7f0000000040)={0x20, 0x0, 0x3, {0x0, 0x1}}, 0x20) 04:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x18020000, @loopback={0x0, 0x1}}, 0x1c) 04:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x4000000) 04:25:33 executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f00000000c0)=0x8, 0x4) r1 = socket$inet6(0xa, 0x1000000000006, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x5, 0x7fff, 0x100000000}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000140)={r2, 0xc90, 0x80, 0x800, 0x8, 0x4}, &(0x7f0000000180)=0x14) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet_tcp_int(r0, 0x6, 0x4, &(0x7f0000000040), &(0x7f0000000080)=0xfffffc5e) 04:25:33 executing program 3: socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)={0xffffffffffffffff}) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000001c0)={0x0, @loopback}, &(0x7f0000000280)=0xfffffffffffffdd7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'yam0\x00', r1}) perf_event_open(&(0x7f0000000200)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) munlockall() r2 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x1) ioctl$SNDRV_TIMER_IOCTL_TREAD(r2, 0x40045402, &(0x7f0000000180)) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000100)=0x0) perf_event_open(&(0x7f00000002c0)={0x1, 0x70, 0x81, 0x2, 0x70000000000, 0xff, 0x0, 0x7, 0x4000, 0x3, 0x0, 0x0, 0x0, 0x392, 0x3d5, 0xffff, 0x0, 0x5, 0x2, 0xff, 0x81, 0x0, 0x0, 0x9, 0x1000, 0xc7ee, 0x37, 0x8, 0x5, 0xffff, 0x5ed, 0x8000, 0x20e3, 0x8, 0x2, 0x3, 0x5, 0xfffffffffffffff8, 0x0, 0x5, 0x2, @perf_bp={&(0x7f00000000c0), 0x2}, 0x80, 0x33, 0x8, 0x7, 0x3, 0x401, 0xc1}, r3, 0x3, r2, 0x8) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000040)) 04:25:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x142800, @loopback={0x0, 0x1}}, 0x1c) 04:25:33 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x2) 04:25:34 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:34 executing program 3: r0 = memfd_create(&(0x7f000088f000)='\x00\x00\x00', 0x4) ftruncate(r0, 0x1000000) read(r0, &(0x7f0000000000)=""/48, 0x200000) socket$inet_udplite(0x2, 0x2, 0x88) 04:25:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xfcffffffffff0f00) 04:25:34 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5400, @loopback={0x0, 0x1}}, 0x1c) 04:25:34 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r1 = socket(0x11, 0x3, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x4000) ioctl$TIOCEXCL(r2, 0x540c) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000788000)=0x2, 0x4) bind$packet(r1, &(0x7f0000000480)={0x11, 0x3, 0x0, 0x1, 0x0, 0x6, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x14) setsockopt(r1, 0x107, 0x5, &(0x7f0000001000), 0x35e) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x21, &(0x7f0000000080)=0x7ffffffe, 0xffffffffffffff07) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e23, @multicast1=0xe0000001}, 0x10) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f0000000040), 0x4) sendto$inet(r3, &(0x7f0000a88f88), 0xfffffffffffffe6e, 0x20000000, &(0x7f0000e68000)={0x2, 0x4004e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$sock_netdev_private(r3, 0x89f1, &(0x7f0000000180)="cf304c1d5b6ba85eb54b335790054e3171f2dd0141d16bd538329f348f4ea2ef09eb236e0974f15849d593393d5c00a06df7a604af43508d958c7a8f06bb79df7b9df1c87450645a20c62c809feff1ea220af0f2fe29ee8aa59202ec3b91a45e8bd042ad49324b67da4b91e78fabb45811fafb14fd4d10a684bbbe8c23fce53f8adffebeecbef5201c7477d67148f502704bdd7fc77c80e279f13bee3c21908333a6df36c9785dfee3") shutdown(r3, 0x1) 04:25:34 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5, @loopback={0x0, 0x1}}, 0x1c) 04:25:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xf01f0000000000) 04:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x305, @loopback={0x0, 0x1}}, 0x1c) 04:25:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1000000) 04:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x281400, @loopback={0x0, 0x1}}, 0x1c) 04:25:34 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x300) 04:25:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x6000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xacf4fb08, @loopback={0x0, 0x1}}, 0x1c) 04:25:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x3) 04:25:36 executing program 0: r0 = getpid() r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2010240, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0xfffffffffffffffc}, r0, 0x0, 0xffffffffffffffff, 0x40000) r2 = socket(0x8, 0x800, 0x59d53760) socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = dup(r1) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000080)={r3, r4}) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x0, 0x31, 0xffffffffffffffff, 0x0) msync(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x6) 04:25:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:36 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:36 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x54550100, @loopback={0x0, 0x1}}, 0x1c) 04:25:36 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:36 executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) getsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:25:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1fd000) 04:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x600000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:36 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_mount_image$hfsplus(&(0x7f0000000040)='hfsplus\x00', &(0x7f0000000080)='./file0\x00', 0x0, 0x0, &(0x7f0000000600), 0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="666f7263652c6e6c733d63703733372d6e6c733d759366382c00"]) r1 = syz_open_dev$sndpcmc(&(0x7f0000000400)='/dev/snd/pcmC#D#c\x00', 0x640, 0x400000) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000440)=@ax25={0x3, {"4ecfeb67ab5822"}, 0x80000001}, 0x80, &(0x7f0000000580)=[{&(0x7f00000004c0)="d8191cae8af66b4bff5997e87fbf733a36930660ae891241086d5bf81356483a2df5ac386922f71e8d73611e26dd", 0x2e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f0000000500)="c1a2c60616fe03d63c0194319a4143b474a39498dee1c718afe7cca24fea1296eb2ce29d72bee57b754b39c6098e66b6dc5866e21ce129140ef5639691f9f2bca004135dae561a3122c8115113d8fe22b1bb6e6f75e6b31dbdc9df69145b88", 0x5f}], 0x3, 0x0, 0x0, 0x81}, 0x20008840) r2 = geteuid() r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='vmnet1cpuset\x00'}, 0x10) ioctl$EVIOCSABS2F(r3, 0x401845ef, &(0x7f00000003c0)={0x509a, 0x8, 0x3ff, 0x7, 0x0, 0x2}) syz_mount_image$f2fs(&(0x7f0000000000)='f2fs\x00', &(0x7f00000000c0)='./file0\x00', 0x9, 0x2, &(0x7f0000000240)=[{&(0x7f0000000100)="5bf9ade83fd687976d99ccc620c80ad468c36ae39af5a54366172d0369b82ded310910fe510a2a400b441186c4261b9a00d62ab6706149e5f7a32fc46a9e7d5c5529c3f93694a97b87d7f85a63bb96e8d7f7df52db1a43d9e069947cefd41cf0b5192d8466fe8d0b869a6a8ecbbe19b2b45d5f2dbf3e6821", 0x78, 0x3ff}, {&(0x7f0000000180)="706c127f8004b327e1cced6efceee517cfba95176e672ec0af1d745854cd787b248337107732bdf4231b3a13d2ad986e5c24c7720819b6a8c83e0915f7f00567e0b8f4a1ffd34377b94e7f1359ca53014815260190bf4f41bdeac32bddc17e807ecb839e1f699270cc4b5966d7736f7f031bb9b307db32b73f1a798c9c8aba8787e40ce398fd445145e11b4a0a10232409df2c54c8759f", 0x97, 0x20}], 0x80000, &(0x7f00000002c0)=ANY=[@ANYBLOB='resuid=', @ANYRESHEX=r2, @ANYBLOB=',nodisc\br,disable_roll\x00\x00\b\x00\x00\x00rd,\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00']) write$P9_RSTATFS(r3, &(0x7f0000000600)={0x43, 0x9, 0x2, {0x14, 0x4, 0x1, 0x0, 0x0, 0x7, 0xfffffffffffffff7, 0x20, 0x8000}}, 0x43) 04:25:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x400000000000000) 04:25:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:36 executing program 0: ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000000)=0x0) sched_setparam(r0, &(0x7f0000000040)=0x5) r1 = socket$inet6(0xa, 0x1000002000002, 0xc730) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = accept4(r1, 0x0, &(0x7f0000000080), 0x80800) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f0000000100)={0x0, 0x8001, 0x80}, &(0x7f0000000140)=0x8) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r3, @in6={{0xa, 0x4e22, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x1000}}, 0x6, 0x401, 0x3f, 0x8}, 0x98) r4 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/sequencer2\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r4, 0x40085112, &(0x7f0000000180)={{0x7fffffff, 0x100000000000a}, {0x0, 0xfffffffffffffffc}, 0xfffffffffffffffe}) openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x40000, 0x0) 04:25:36 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1e00000000000000) 04:25:37 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:37 executing program 0: r0 = userfaultfd(0x80804) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000ff5fe8)={0xaa}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000ff7fe0)={{&(0x7f0000012000/0x2000)=nil, 0x2000}, 0x1}) mlock(&(0x7f0000015000/0x2000)=nil, 0x2000) pipe2(&(0x7f0000000000), 0x4800) ppoll(&(0x7f0000000340)=[{r0, 0x1}], 0x1, &(0x7f0000000380)={0x77359400}, &(0x7f00000003c0), 0x8) 04:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf0052686, @loopback={0x0, 0x1}}, 0x1c) 04:25:37 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1f00) 04:25:37 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:37 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffff91, @loopback={0x0, 0x1}}, 0x1c) 04:25:37 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1f00000000000000) 04:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffffff5, @loopback={0x0, 0x1}}, 0x1c) 04:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x2000000) 04:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x50, @loopback={0x0, 0x1}}, 0x1c) 04:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xa00) 04:25:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2bd, @loopback={0x0, 0x1}}, 0x1c) 04:25:37 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1e00) 04:25:38 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x900000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:38 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x4) 04:25:38 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'morus1280-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="649c47ad46390dc86dae79fa409d4d54", 0x10) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3, 0x80000) recvfrom$inet6(r1, &(0x7f0000000180)=""/172, 0xac, 0x40012020, &(0x7f0000000240)={0xa, 0x4e21, 0xfffffffffffffff7, @dev={0xfe, 0x80, [], 0xd}, 0x6}, 0x1c) truncate(&(0x7f0000000280)='./file0\x00', 0x3fffffff8) r2 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280), 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) io_setup(0x800000100000005, &(0x7f0000f69000)=0x0) io_submit(r3, 0x1, &(0x7f0000bd9fe0)=[&(0x7f0000617fc0)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f00000000c0)="b3b03996ff05abb1e8b1c24b50898d8f", 0x10}]) 04:25:39 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x10000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xa) 04:25:39 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:39 executing program 0: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x80, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ppoll(&(0x7f0000000000)=[{r1, 0x2303}, {r0, 0x3cd439c9326f8ecd}, {r1, 0x28}], 0x3, &(0x7f0000000040)={0x0, 0x989680}, &(0x7f00000000c0)={0xffff}, 0x8) write$RDMA_USER_CM_CMD_CREATE_ID(r1, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000100)}}, 0x20) 04:25:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x48000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x3000000) 04:25:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x9, @loopback={0x0, 0x1}}, 0x1c) 04:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1f000000) 04:25:39 executing program 0: r0 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x7e, 0x48200) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000040)=0x8, 0x4) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$team(&(0x7f0000000100)='team\x00') recvmsg(r0, &(0x7f00000006c0)={&(0x7f0000000200)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000640)=[{&(0x7f0000000280)=""/155, 0x9b}, {&(0x7f0000000340)=""/251, 0xfb}, {&(0x7f0000000440)=""/89, 0x59}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000580)=""/164, 0xa4}], 0x5, &(0x7f0000000140)=""/42, 0x2a}, 0x2) getsockopt$inet6_mreq(r0, 0x29, 0x1d, &(0x7f0000000700)={@local, 0x0}, &(0x7f0000000740)=0x14) accept$packet(r0, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000007c0)=0x14) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000800)={0x0, @broadcast, @multicast2}, &(0x7f0000000840)=0xc) recvmmsg(r2, &(0x7f0000004ac0)=[{{&(0x7f0000000880)=@ll={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, 0x80, &(0x7f0000000cc0)=[{&(0x7f0000000900)=""/26, 0x1a}, {&(0x7f0000000940)=""/235, 0xeb}, {&(0x7f0000000a40)=""/205, 0xcd}, {&(0x7f0000000b40)=""/94, 0x5e}, {&(0x7f0000000bc0)=""/229, 0xe5}], 0x5, &(0x7f0000000d40)=""/4096, 0x1000, 0x1f}, 0x2}, {{&(0x7f0000001d40)=@generic, 0x80, &(0x7f00000033c0)=[{&(0x7f0000001dc0)=""/138, 0x8a}, {&(0x7f0000001e80)=""/216, 0xd8}, {&(0x7f0000001f80)=""/94, 0x5e}, {&(0x7f0000002000)=""/222, 0xde}, {&(0x7f0000002100)=""/83, 0x53}, {&(0x7f0000002180)=""/4096, 0x1000}, {&(0x7f0000003180)=""/73, 0x49}, {&(0x7f0000003200)=""/202, 0xca}, {&(0x7f0000003300)=""/177, 0xb1}], 0x9, 0x0, 0x0, 0x6}, 0x100}, {{&(0x7f0000003480)=@in={0x0, 0x0, @multicast1}, 0x80, &(0x7f0000004740)=[{&(0x7f0000003500)=""/8, 0x8}, {&(0x7f0000003540)=""/4096, 0x1000}, {&(0x7f0000004540)=""/252, 0xfc}, {&(0x7f0000004640)=""/66, 0x42}, {&(0x7f00000046c0)=""/61, 0x3d}, {&(0x7f0000004700)=""/50, 0x32}], 0x6, &(0x7f00000047c0)=""/91, 0x5b, 0x7}, 0x9fd0}, {{&(0x7f0000004840)=@l2, 0x80, &(0x7f00000049c0)=[{&(0x7f00000048c0)=""/224, 0xe0}], 0x1, &(0x7f0000004a00)=""/163, 0xa3, 0x5}, 0x100000000}], 0x4, 0x10000, &(0x7f0000004bc0)={0x0, 0x989680}) getsockname(r2, &(0x7f0000004c00)=@ll={0x0, 0x0, 0x0}, &(0x7f0000004c80)=0x80) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r0, 0x40405515, &(0x7f0000004d40)={0x1, 0x3, 0x2, 0xb16, '\x00', 0x100000001}) getsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000004cc0)={@empty, @empty, 0x0}, &(0x7f0000004d00)=0xc) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000004d80)=@req) getsockname$packet(r1, &(0x7f0000004e00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000004e40)=0x14) getsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f00000053c0)={{{@in=@local, @in6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000054c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000005880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400020}, 0xc, &(0x7f0000005840)={&(0x7f0000004e80)=ANY=[@ANYBLOB="10030000", @ANYRES16=r3, @ANYBLOB="100528bd7000fddbdf250100000008000100", @ANYRES32=r4, @ANYBLOB="e001020040000100240001006c625f686173685f737461747300000000000000000000000000000000000000080003000b000000080004000500000008000700000000003c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000008000300060000000400040008000600", @ANYRES32=r5, @ANYBLOB="40000100240001006c625f74785f686173685f746f5f706f72745f6d617070696e67000000000000080003000300000008000400", @ANYRES32=r6, @ANYBLOB="080007000000000038000100240001006c625f73746174735f726566726573685f696e74657276616c00000000000000080003000300000008000400d9880000400001002400010071756575655f69640000000000000000000000000000000000000000000000000800030003000000080004006700000008000600", @ANYRES32=r7, @ANYBLOB="38000100240001006d626173745f72656a6f696e5f636f00000000000000000000000800030003000000080004000800000038000100240001006e6f746966795f70656572735f636f756e7400100000000000000000000000000800030003000000080004000100000038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000800030003000000080004000600000008000100000000000000", @ANYRES32=r8, @ANYBLOB="4400020040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b00000008000400ad97000008000600", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="7c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c000000000000000800030003000000080004000500000040000100240001006c625f706f72745f737461747300000000000000000000000000000000000000080003000b000000080004000800000008000600", @ANYRES32=r11, @ANYBLOB="080001003911b68027514017bef4a88b864d80065d1a6a647860cca297aa611f070a320346eaf28a2b1a81ace606be53af7a4aacac64db9fe869415a5bff74dd9ae619c11e2df5f728a59cba72b26d71ae85d6732d8011a6ead958ad77d38c20c78220b65c2237e9529e6cdcf9b92808e26c00c36ec9219b3444b35c26445b3c69c298570286be3e4d6443073b9ede38bae70e6e106a5a91b5", @ANYRES32=r12, @ANYBLOB="3c00020038000100240001006c625f73746174735f726566726573685f696e74657276616c0000000000000008000300030000000800040005000000"], 0x310}, 0x1, 0x0, 0x0, 0x4000}, 0x80) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x11, &(0x7f00000000c0)=0x2, 0x4) 04:25:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1f4, @loopback={0x0, 0x1}}, 0x1c) 04:25:39 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xa000000) 04:25:40 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1e000000) 04:25:40 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xff0f000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:40 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000140)=[{&(0x7f0000006f07)=""/249, 0x13e5}], 0xf9) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 0: mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB='\x00\x00\x00', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) r1 = dup2(r0, r0) write$P9_RMKDIR(r1, &(0x7f0000000780)={0x14, 0x49, 0x1, {0x4, 0x4, 0x4}}, 0x14) stat(&(0x7f00000000c0)='./file0/file0\x00', &(0x7f0000000480)) r2 = syz_open_dev$audion(&(0x7f00000003c0)='/dev/audio#\x00', 0x3, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x9, &(0x7f00000005c0)=0x15ed, 0x4) read$FUSE(r0, &(0x7f0000001000), 0x1000) inotify_init() read$FUSE(r0, &(0x7f00000020c0), 0x1000) r3 = syz_open_dev$amidi(&(0x7f00000001c0)='/dev/amidi#\x00', 0x4, 0x101080) ioctl$sock_inet_SIOCDELRT(r3, 0x890c, &(0x7f0000000280)={0x5, {0x2, 0x4e24, @multicast1=0xe0000001}, {0x2, 0x4e21, @multicast1=0xe0000001}, {0x2, 0x4e22}, 0x0, 0x6, 0x3, 0x266, 0x1c00000000, &(0x7f0000000240)='rose0\x00', 0x924c, 0xfffffffffffffffe, 0xec}) utimes(&(0x7f0000000040)='./file0\x00', &(0x7f0000000180)={{0x77359400}}) getsockopt$llc_int(r3, 0x10c, 0x0, &(0x7f0000000000), &(0x7f0000000380)=0x4) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f00000006c0)={r2, r2, 0x6, 0x7ff, &(0x7f0000000600)="4ffc3d5774bad0a6539804ac91ab9157a40e81da53c6ee59d5828e093884f5792f89c9db7c224fc7e94d00eba910bdbbec23b8a2e88ac62eab1f87e2b21a8f8f4a647ac6e81e36c31eb7d8de3494a4c42cacb67ed85f47d1418ef4405d7e75ed945b47c24bfab5a190c7cf6983b0a2d114ca480d710e0fc3a895b74a103b4db3aec15d351162782ca5f17d48e1f1635d18523496dab66762265d26223b9addbba4754ab08150", 0xffffffffffffff81, 0x2, 0x5, 0x2, 0xab7e, 0x100, 0x0, "8e5a376e6b6b955a70c72eb6a40da1711c985a52e98df9b39eefa65400df4c501d8b2946f14c8fd81d4c30faba7f25d9bddad6d0d331454331a3354c2d98f95434da1b52b3d8dc3fddfc2a02530de14677c45275d2047802f862a8cc87f000b7bd5b68a7af9b6fc5557bfc3ebcd920b22b3173170e5aa1f487f6a22864"}) write$FUSE_INIT(r0, &(0x7f0000000100)={0x50, 0x0, 0x1, {0x7, 0x1b}}, 0x50) write$FUSE_DIRENT(r0, &(0x7f0000000500)={0x90, 0x0, 0x2, [{0x1, 0x0, 0xfffffe3c, 0x0, 'em1nodevem1'}, {0x0, 0x0, 0x1, 0x0, ','}, {0x0, 0x0, 0x1c, 0x0, "2b73797374656dcc6370757365746367726f7570246367726f757015"}]}, 0x90) 04:25:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xf01f00) 04:25:40 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x62f5fb08, @loopback={0x0, 0x1}}, 0x1c) 04:25:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xffffffffffffc) 04:25:40 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xcb00, @loopback={0x0, 0x1}}, 0x1c) 04:25:41 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:41 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1ff000) 04:25:42 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe803, @loopback={0x0, 0x1}}, 0x1c) 04:25:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x1e) 04:25:42 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xecb8fdff00000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x62f5fb0800000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x100000000000000) 04:25:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfffdb8ec, @loopback={0x0, 0x1}}, 0x1c) 04:25:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xffffffff00000000) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x218, @loopback={0x0, 0x1}}, 0x1c) 04:25:42 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xd01f00) 04:25:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe803000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x300000000000000) 04:25:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x80550000, @loopback={0x0, 0x1}}, 0x1c) 04:25:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xd01f0000000000) 04:25:43 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x20000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:43 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8fbf562, @loopback={0x0, 0x1}}, 0x1c) 04:25:43 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0xa00000000000000) 04:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xa, @loopback={0x0, 0x1}}, 0x1c) 04:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ftruncate(r0, 0x5) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfe80000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000000c0)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) fcntl$setpipe(r1, 0x407, 0x7fffffff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, &(0x7f0000000080)=0x5) 04:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc00000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:44 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000080)=0x20001000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x24ccc, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xa00000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) syz_open_dev$sndpcmc(&(0x7f0000000200)='/dev/snd/pcmC#D#c\x00', 0x9, 0x4400) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl(r0, 0x0, &(0x7f00000002c0)="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") getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000140), &(0x7f0000000180)=0xc) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r1, 0x800442d2, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x0, 0x0, 0x0, @local}, {0x0, 0x0, 0x0, @random}, {}]}) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f00000012c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0500090036440100", @ANYPTR=&(0x7f00000001c0)=ANY=[@ANYBLOB="88ab24c043f95915f70582dd41744d8d0ce9141e265f4ede8308a3acf9b5ce23fb11016c369218d135c6b6c2cb2d57d905c4f4"], @ANYBLOB="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"]) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:45 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1000000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e20, 0x200, @remote={0xfe, 0x80, [], 0xbb}, 0x6}}, 0xa477, 0x7f, 0x6, 0x10000, 0x7}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r0, 0x84, 0x79, &(0x7f0000000200)={r1, 0xeda, 0x10000}, 0x8) r2 = socket$inet6(0xa, 0x80007, 0x81) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$RTC_PLL_SET(r3, 0x40207012, &(0x7f0000000080)={0x1000, 0x4, 0x6, 0xfffffffffffffff8, 0xfff, 0x4, 0x80}) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f00000000c0)=0x49, 0x4) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xbb5e16dbb3e3f1c4, 0x10, r2, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r3, 0x0) 04:25:45 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5455010000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000400)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000440)={'bpq0\x00', r2}) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000340)=0x1000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x400, @mcast2={0xff, 0x2, [], 0x1}, 0x800}, @in6={0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x5}, @in6={0xa, 0x4e20, 0x4, @empty, 0x3}, @in={0x2, 0x4e23, @rand_addr=0x401}, @in={0x2, 0x4e20, @loopback=0x7f000001}, @in={0x2, 0x4e23, @multicast1=0xe0000001}], 0x84) setsockopt$RDS_GET_MR(r1, 0x114, 0x2, &(0x7f0000000200)={{&(0x7f00000000c0)=""/244, 0xf4}, &(0x7f00000001c0)}, 0x20) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2, 0x18011, r1, 0x0) r3 = getpgrp(0xffffffffffffffff) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x3) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000680)={'mangle\x00', 0x3, [{}, {}, {}]}, 0x58) fcntl$notify(r0, 0x402, 0x0) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000580)=0x3) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f00000002c0), 0x4) accept4(r1, &(0x7f0000000380)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, &(0x7f0000000300)=0x80, 0x800) ioctl$EVIOCGSW(r1, 0x8040451b, &(0x7f0000000480)=""/207) connect$bt_rfcomm(r1, &(0x7f0000000000)={0x1f, {0x9, 0x666b, 0xd3af, 0x8000, 0x1, 0x8000}, 0xf1}, 0xa) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xf5ffffff, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: r0 = socket$inet6(0xa, 0x3, 0x31) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r1, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@remote={0xac, 0x14, 0x14, 0xbb}, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1=0xe0000001, 0xfffffffffffffffd, 0x33}, 0x0, @in6=@loopback={0x0, 0x1}, 0x0, 0x0, 0x0, 0x90}}, 0xe8) connect$inet6(r0, &(0x7f00000000c0)={0xa}, 0x1c) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x200080, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) ioctl$BLKRRPART(r3, 0x125f, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x1000) shmget(0x3, 0x8000, 0x440, &(0x7f0000ff8000/0x8000)=nil) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e21, 0x7fffffff, @mcast1={0xff, 0x1, [], 0x1}, 0x5}, 0x1c) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4000, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: socket$inet6(0xa, 0x8000a, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000022c0)={0x7, 0x2, {0xffffffffffffffff, 0x2, 0x7ff, 0x0, 0x9}}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r0, 0x0) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f00000001c0)={0x4, 0x0, [{0x14000, 0xda, &(0x7f0000000080)=""/218}, {0x6000, 0x1000, &(0x7f00000002c0)=""/4096}, {0x1004, 0x33, &(0x7f0000000180)=""/51}, {0x5000, 0x1000, &(0x7f00000012c0)=""/4096}]}) 04:25:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x700, @loopback={0x0, 0x1}}, 0x1c) 04:25:45 executing program 2: timer_create(0x5, &(0x7f0000000140)={0x0, 0x41, 0x4}, &(0x7f0000000180)=0x0) timer_settime(r0, 0x0, &(0x7f00000001c0)={{}, {0x77359400}}, &(0x7f0000000200)) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = request_key(&(0x7f0000000080)='asymmetric\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000100)='/dev/dsp#\x00', 0xffffffffffffffff) keyctl$get_keyring_id(0x0, r2, 0x2) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r3, 0x0) 04:25:45 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfc, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socketpair$packet(0x11, 0x3, 0x300, &(0x7f0000000040)) r1 = syz_open_dev$mouse(&(0x7f0000000080)='/dev/input/mouse#\x00', 0xa4, 0x40) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f00000001c0)={0x400, 0x0, &(0x7f00000000c0)="aa063fa086bb65fe4b55c2fa5d8152da827ed59437f287af10b2c990dcbe25f3f2f708f6a4c189b4b8bb44f9bd3ac42b7d7197ea2f60a2c99d9609f37797381c6fe672ccd1a666f16c022da4ebb67baf01b65be4e2779cd5bcec85d5162e6c53289a473feb906ae4bebbffab8554ee9b6544ea0a275e653e06b5b3929a798280e0521f241f96e45a64db5ecf2a458f326c132ad731292906ba6efb516dbf8c09152cca394eaeae062b0a19606df4918ddbb28d2d5f2f263cf559b6e4ca074805997cbc19f0f5b3b9f11990c769fe9e6af13ba325", &(0x7f00000002c0)="c68246f9f8882f303f68540e2c8c68eed1f43fea8ba9e982d225fd711ca204da6cd91257da761d2ee8dc8cccbeb2efdb065d3e23a1cd294409b4d8d00ad905ab0f2dd220a80e76cafc735284ec699039c5676044b6e59f184e0641acde68c78de365842aeaba9791e325e73bf2a9b2c30f618c8e4c44aa04c7268cd0976f3dd7a71268130babbec88f6708c93b741578356f3ad7f79c11395f7b0be6f9bc2e3cfe18e82f955018f3717970c85fc6358491560404d2c89a2164e198b7502db49ad06f804d0b4fee4746044eb2fb788a4c0b54cf89d03e", 0xd4, 0xd6}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, 0xffffffffffffffff, 0x0) 04:25:47 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffffff00000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x1367}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r2, 0xfffffffffffffffc, 0x7}, &(0x7f0000000140)=0xc) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe8030000, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x54000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000080)=0x1000) r2 = getpgrp(0x0) getpriority(0x1, r2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x91ffffff, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffe, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x503, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) 04:25:47 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x0) ioctl(r0, 0x5, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = syz_open_dev$sndpcmc(&(0x7f0000000100)='/dev/snd/pcmC#D#c\x00', 0x7ff, 0x30080) ioctl$INOTIFY_IOC_SETNEXTWD(r1, 0x40044900, 0x258) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x6, [0x0, 0x0, 0x7fff, 0x4000000000589b, 0x8, 0x69]}, 0x10) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) 04:25:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x3, @loopback={0x0, 0x1}}, 0x1c) 04:25:47 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4800000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:48 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000140)={{{@in=@rand_addr, @in6}}, {{@in6=@mcast1}, 0x0, @in6=@ipv4={[], [], @multicast1}}}, &(0x7f0000000240)=0xe8) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f00000000c0), &(0x7f0000000100)=0x8) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) 04:25:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x2000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:48 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:48 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x2, 0x4000000000000000) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000080)=@req3={0x5, 0x4f2, 0x0, 0x0, 0xce2c, 0x7, 0x4}, 0x1c) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) clone(0x4100, &(0x7f0000000180)="d5d54ea07cd894f1d634d284f174876dc7d18cf33a0554cc12be344af8b14238a476c93ad0a713103984332984f596d248eeab2c048989d9e907eba93d6efe517da52b611d75e1bee6c0e46f02062addb266523539d9bd3952a24e27f9c9a45f79c2fa7c2df3507d58b0c094d1ff10f51eac5725975d9f37f16f20cc0f65c554213be21a040547a5aad1fae8a4672d552d12b9a3ceccc99f1330518e1d7f6f", &(0x7f0000000240), &(0x7f00000000c0), &(0x7f0000000100)='(&0x0, @in6={{0xa, 0x4e20, 0x0, @ipv4={[], [0xff, 0xff]}, 0x3}}}, &(0x7f0000000240)=0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f00000004c0)={r1, 0x7f}, &(0x7f0000000500)=0x8) r2 = socket$inet6(0xa, 0x1000000000002, 0x20) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f00000000c0)={@remote}, &(0x7f0000000100)=0x14) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(r2, 0x0, 0x1, &(0x7f0000000080)=0x7, 0x4) r4 = getuid() r5 = getgid() lchown(&(0x7f0000000540)='./file0\x00', r4, r5) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x1, &(0x7f0000000180)={0xffffffffffffffff}}}, 0x20) fcntl$setlease(r3, 0x400, 0x2) write$RDMA_USER_CM_CMD_CONNECT(r3, &(0x7f00000002c0)={0x6, 0x118, 0xfa00, {{0x7, 0xff, "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", 0xc5, 0x4, 0x1, 0x6, 0x100, 0x2, 0x99}, r6}}, 0x120) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x4e20, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r3, 0x0) 04:25:49 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xcc4c020000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:49 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:49 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xfec0000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:49 executing program 2: r0 = socket$inet6(0xa, 0xc, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x5810, r1, 0x0) syz_mount_image$gfs2(&(0x7f0000000040)='gfs2\x00', &(0x7f00000000c0)='./file0\x00', 0x7321cb4e, 0x6, &(0x7f00000012c0)=[{&(0x7f0000000100)="264552c6bd3260eddad974f8f56777ea2461102c881e51c494d27c1c5bfbe07c3a604af785ed48209c14ed8e941de654cb66b09673ade44f69a2b86d878f2d74a27bbcdbda0e1ea4ef6c7ada", 0x4c, 0x9}, {&(0x7f0000000180)="0a8d3689ada5a45deb9aa88f0fa1441facf89b06aacf623c0ef9c08a4ff086ffe21fc14a5f3524ec1bc3a71b82c507c427476d6280", 0x35, 0x8000}, {&(0x7f00000002c0)="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", 0x1000, 0x6}, {&(0x7f00000001c0)="aecbeedfae1e97f422fb8f0559aa9cd91563624246448dd2e4238322294bf49011ebca24be8843a3597b9b18ae156ebb8a6d501d43f4f1feffc2c4", 0x3b, 0x7}, {&(0x7f0000000200)="7e1e528785c8022dfc62207b7db25428a81716a07ed1aec2ad6139d1d97ca886987b0b4d26bf44a3d1", 0x29, 0xfffffffffffffffa}, {&(0x7f0000000240)="1305b6098c054b8abd800a33faa17aa2a479d224d11a98a4e01ad58b83901cacb7535aa65d19990d0302390772f75e0174be176e04de89", 0x37, 0x100000000}], 0x20000, &(0x7f0000001380)={[{@commit={'commit', 0x3d, 0x7fffffff}, 0x2c}]}) 04:25:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8055000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:49 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000b32fff)}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffd}, 0x0, 0x0, r3, 0x0) exit(0x0) dup2(r2, r3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xe00000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x50000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x4e68, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xcb00000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xbd020000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) open$dir(&(0x7f00000000c0)='./file0\x00', 0x27d, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x9000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xa000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x54, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x5400000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:50 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffc, 0x2002014, r1, 0x0) 04:25:50 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x8dffffff00000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x1802000000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x80000000002, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:51 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:51 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:51 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) socket$pptp(0x18, 0x1, 0x2) 04:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0xffffff8d, @loopback={0x0, 0x1}}, 0x1c) 04:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x44bf7d35, @loopback={0x0, 0x1}}, 0x1c) 04:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) fchmod(r0, 0x11) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x801, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x10, @loopback={0x0, 0x1}}, 0x1c) 04:25:51 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x3) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000000c0)={0x0}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000140)={r2, 0xe5e2}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) sync_file_range(r1, 0x230, 0xffffffff, 0x6) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0x3, 0x4) 04:25:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x862605f000000000, @loopback={0x0, 0x1}}, 0x1c) 04:25:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x6) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f00000000c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x88) setsockopt$inet6_group_source_req(r1, 0x29, 0x2f, &(0x7f0000420000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) setsockopt$inet6_group_source_req(r1, 0x29, 0x2b, &(0x7f0000a83000)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, {{0xa, 0x0, 0x0, @loopback={0x100000000000000, 0x1}}}}, 0x108) recvmmsg(r0, &(0x7f0000001440)=[{{&(0x7f0000000180)=@hci={0x0, 0x0}, 0x80, &(0x7f0000000200)=[{&(0x7f0000000080)=""/57, 0x39}], 0x1, &(0x7f0000000240)=""/24, 0x18, 0x5}, 0x10001}, {{&(0x7f00000002c0)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @broadcast}}, 0x80, &(0x7f0000001340)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, &(0x7f0000001380)=""/177, 0xb1, 0x4}, 0x80000001}], 0x2, 0x40000000, &(0x7f00000014c0)={0x0, 0x1c9c380}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001500)={@mcast2={0xff, 0x2, [], 0x1}, 0xc, r2}) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r3, 0x0) 04:25:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x44bf7d35, 0x1}}, 0x1c) 04:25:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4000000000000000, 0x1}}, 0x1c) 04:25:52 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) fcntl$setownex(r0, 0xf, &(0x7f00000000c0)={0x1, r2}) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:52 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x20000000, 0x1}}, 0x1c) 04:25:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r2, 0xc1105517, &(0x7f0000000040)={{0x13, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x2, 0x20000000, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', &(0x7f0000000000), 0x0, [], [0x4]}) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:53 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcc4c0200, 0x1}}, 0x1c) 04:25:53 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x1}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000100)={r2, 0x6, 0x2}, &(0x7f0000000140)=0x8) ioctl$int_in(r1, 0x5421, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x684e, 0x1}}, 0x1c) 04:25:53 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r0, 0x0) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x218, 0x1}}, 0x1c) 04:25:53 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f00004ca000)={&(0x7f0000690000)={0x1c, 0x0, 0x207, 0x1, 0x0, 0x0, {}, [@nested={0x8, 0x1, [@generic="06"]}]}, 0x1c}, 0x1}, 0x0) sendmsg$nl_netfilter(r0, &(0x7f0000001780)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000001740)={&(0x7f00000000c0)={0x14, 0x3, 0x7, 0x21}, 0x14}, 0x1}, 0x0) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000080)="025cf8207000000000000045caf687e455f4cc47c1903757277155f7f686ff6c0ecad190449df02eeb0dc498cc95422a4fb3b6b11841ad699b2811279f3a100e") r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x40010, r2, 0x0) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x54, 0x1}}, 0x1c) 04:25:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x62f5fb0800000000, 0x1}}, 0x1c) 04:25:54 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000080)={0x3, r1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfe800000, 0x1}}, 0x1c) 04:25:54 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x3000000, 0x1}}, 0x1c) 04:25:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) accept$inet(r1, &(0x7f0000000080)={0x0, 0x0, @dev}, &(0x7f00000000c0)=0x10) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xbd02, 0x1}}, 0x1c) 04:25:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$int_in(r0, 0x5473, &(0x7f0000000080)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) perf_event_open$cgroup(&(0x7f0000000100)={0x5, 0x70, 0x6, 0x401, 0x3, 0x7, 0x0, 0x1ff, 0x80, 0x0, 0x25000000000, 0x6, 0x9, 0x7, 0x100, 0xffffffff, 0x80000000, 0x5, 0x7f, 0x100000000, 0x86b, 0x7fffffff, 0x7, 0x1ff, 0x2c, 0x20, 0x1000, 0x3, 0x6, 0x23ec098d, 0x1, 0x1, 0x400, 0x80000001, 0x80000000, 0x15e3, 0x8000, 0x5, 0x0, 0x9, 0x0, @perf_bp={&(0x7f00000000c0), 0x8}, 0x20020, 0x3, 0x401, 0x7, 0x2, 0x7fffffff, 0x9270000}, r1, 0xb, r1, 0x2) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r1, 0x84, 0x12, &(0x7f0000000180), &(0x7f00000001c0)=0x4) 04:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x10, 0x1}}, 0x1c) 04:25:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f00000000c0)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000040)) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x3, 0x800, 0xff, 0x0, 0x0, 0x1f, 0x80000000, 0x8, 0x1ff, 0x10000, 0x4, 0x2000, 0x0, 0x4, 0x6, 0x400, 0x710a, 0xb9c, 0x8f3}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x50, 0x1}}, 0x1c) 04:25:54 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000080)=0x7, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:55 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2, 0x1}}, 0x1c) 04:25:55 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x3) ioctl$UFFDIO_ZEROPAGE(r1, 0xc020aa04, &(0x7f00000000c0)={{&(0x7f0000ffb000/0x4000)=nil, 0x4000}, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) ioctl$BLKPBSZGET(r1, 0x127b, &(0x7f0000000040)) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x6) 04:25:55 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:55 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:55 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:55 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2000000000000000, 0x1}}, 0x1c) 04:25:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)=0x108) ioctl$int_in(r1, 0x5452, &(0x7f0000000200)=0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) fcntl$addseals(r1, 0x409, 0xf) 04:25:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xbd020000, 0x1}}, 0x1c) 04:25:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000080)=0x1) r1 = syz_open_dev$usbmon(&(0x7f0000000140)='/dev/usbmon#\x00', 0x9, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@ipv4={[], [], @multicast1}, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={[], [], @loopback}}, 0x0, @in6=@loopback}}, &(0x7f0000000200)=0xe8) sendto$packet(r1, &(0x7f0000000180)="23f5738f4a473066e1918c2868680a631ac9831bd53ec11041327d38df43285e7ac8ccc1049caa1a6834d45e1f54a0cf8d0f1ee54c8d3ae3137cb8c4a131506c878ac9ca3058e1a4ea93d80047d006d9b85185395c2bb086ce50302839c4ebf8c2b92283820fae29a5a5dc06fa341b624f44c2b3df313c6d31baff599515", 0x7e, 0x40010, &(0x7f0000000240)={0x11, 0x11, r2, 0x1, 0x9, 0x6, @random="9b3d7957a6e2"}, 0x14) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r3, 0x0, 0x489, &(0x7f00000000c0)={{0x2c, @empty, 0x4e21, 0x1, 'wlc\x00', 0x20, 0x9, 0x3f}, {@rand_addr=0x8, 0x4e21, 0x2001, 0x1818b6bf, 0x4, 0xe2}}, 0x44) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x9, 0x2002012, r3, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000003c0)) 04:25:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4000000, 0x1}}, 0x1c) 04:25:56 executing program 2: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r1, 0x29, 0xcd, &(0x7f00000000c0)={{0xa, 0x4e21, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, {0xa, 0x4e22, 0x800, @dev={0xfe, 0x80, [], 0xb}, 0x3}, 0x5, [0x1, 0x1d, 0xffff, 0x5, 0x6, 0x6, 0x7, 0xfff]}, 0x5c) accept4$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x2710, @my=0x1}, 0xffffffffffffffe6, 0x80800) 04:25:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x200000000000000, 0x1}}, 0x1c) 04:25:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x1ff) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:56 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4800000000000000, 0x1}}, 0x1c) 04:25:56 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x6, 0xa28, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200002c0], 0x0, &(0x7f0000000140), &(0x7f00000002c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{{{0x11, 0x10, 0x15, 'dummy0\x00', 'yam0\x00', 'veth0\x00', 'gre0\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1f}, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x100, 0x150, 0x1c8, [@ip={'ip\x00', 0x20, {{@remote={0xac, 0x14, 0x14, 0xbb}, @remote={0xac, 0x14, 0x14, 0xbb}, 0xff000000, 0x0, 0x3, 0x0, 0x1, 0x10, 0x4e23, 0x4e21, 0x4e24, 0x4e23}}}, @limit={'limit\x00', 0x20, {{0x9, 0x2, 0x7, 0x7fff, 0x3, 0x4}}}]}, [@common=@log={'log\x00', 0x28, {{0x5, "9c58afc78ee0b70cb35a7ee9f313dce6e6b9930437ea4110d30e2e6a9735", 0x7}}}]}, @common=@NFLOG={'NFLOG\x00', 0x50, {{0x3, 0x955, 0x7, 0x0, 0x0, "dfef14b4c494c4630ccf7d48131b7ed6c971fe6948b53413b4aca03449dacd9e7743217730f4625a33b8e4ec45bef7bff030f39af3ece1ea0ccf9e4eca221fe8"}}}}, {{{0x0, 0x8, 0x2, 'bcsf0\x00', 'ifb0\x00', 'ifb0\x00', '\x00', @empty, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="9a55ce8cfd7f", [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 0xa0, 0x118, 0x148, [@cgroup0={'cgroup\x00', 0x8, {{0x8, 0x1}}}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x1ff, 0x1, 0x800, 0x0, 0x0, "8d620d820c836012d43f818eb56d6e67346d7222558dbbdd8fc11d7b741cad1aaef2ac162479948d8859a3a3bec86255fa79c2f2a729feec4706bd008d32bfaa"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8, {{0x3}}}}]}, {0x0, '\x00', 0x2, 0x0, 0x2, [{{{0x11, 0x50, 0x7, 'sit0\x00', 'syzkaller1\x00', 'bpq0\x00', 'ip6_vti0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0x0, 0x0, 0xff], @empty, [0x0, 0xff], 0xe8, 0x150, 0x198, [@ip6={'ip6\x00', 0x50, {{@empty, @local={0xfe, 0x80, [], 0xaa}, [0xff, 0xff000000, 0x0, 0xff], [0xff, 0xff000000, 0x0, 0xff], 0x4, 0x3f, 0x0, 0x4, 0x4e20, 0x4e23, 0x4e21, 0x4e23}}}]}, [@common=@redirect={'redirect\x00', 0x8}, @common=@mark={'mark\x00', 0x10, {{0xfffffff0, 0xffffffffffffffff}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00', 0x200, 0x9, 0x4}}}}, {{{0x7, 0x32, 0x0, 'vlan0\x00', 'bridge_slave_1\x00', 'irlan0\x00', 'sit0\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0x0, 0x0, 0xff, 0x0, 0xff], @random="b53e5cacc13d", [0xff, 0xff, 0x0, 0xff], 0xd8, 0x208, 0x250, [@vlan={'vlan\x00', 0x8, {{0x2, 0x1, 0x88ff, 0x4, 0x7}}}, @cluster={'cluster\x00', 0x10, {{0x4, 0x8d, 0xe2}}}]}, [@common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x2, 'system_u:object_r:admin_passwd_exec_t:s0\x00'}}}]}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz0\x00', 0x80000000, 0x8, 0x80000001}}}}]}, {0x0, '\x00', 0x4, 0xffffffffffffffff}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x2, [{{{0x11, 0x39, 0x8a8f, 'team_slave_0\x00', 'bridge_slave_0\x00', 'ipddp0\x00', 'lo\x00', @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xd}, [0xff, 0xff, 0xff, 0xff, 0xff], @empty, [0x0, 0x0, 0x0, 0xff], 0x70, 0x70, 0xb8}}, @common=@ERROR={'ERROR\x00', 0x20, {"8808853a0c84a01b1e6095f60cf8eb9c64e19febb2bcfe987b23a6911a33"}}}, {{{0x3, 0x14, 0xdaff, 'team_slave_0\x00', 'syzkaller1\x00', 'tunl0\x00', 'veth1_to_bond\x00', @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [0xff, 0x0, 0xff, 0x0, 0xff], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [0xff, 0x0, 0x0, 0xff, 0xff], 0xe8, 0x188, 0x1b8, [@limit={'limit\x00', 0x20, {{0x81, 0x7, 0x574, 0x2, 0x7, 0x8}}}, @cpu={'cpu\x00', 0x8, {{0x9, 0x1}}}]}, [@common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x9, 'syz0\x00', 0x1f}}}, @common=@log={'log\x00', 0x28, {{0x7ff, "981054746498a3f6e194cab4ad89a74243061599ec619edd75907df7078c", 0x8}}}]}, @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0x5}}}}]}]}, 0xaa0) ioctl(r1, 0x6, &(0x7f0000000080)="3ce7f1211de67ae5c45e79f30ad43ecf63c230ab10190a29e7de8d49ee38ff5577cc71387432a73d0a4b6a86a39de4cf6f44481d613bcefcfbcf68a2a8c0557274fb04332cd5f240ab51fd77465cf69614e3029274395783a2b13110e9ac8ed9e609e12415f34f17a090361bc264b997c0feb6dc44bc54944a5698ce0730736a660a1ac203b55cea6959919c7203589cd478099ccce865a9543bf3bcc6419f323446b30ff0") getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000200), &(0x7f0000000240)=0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:57 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5000, 0x1}}, 0x1c) 04:25:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffff9c, 0x84, 0x18, &(0x7f00000000c0)={0x0, 0x7}, &(0x7f0000000100)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r0, 0x84, 0x23, &(0x7f0000000140)={r1, 0x7fffffff}, 0x8) ioctl(r0, 0x891a, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) r3 = getpid() fcntl$getownex(r2, 0x10, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000180)) tkill(r4, 0x28) kcmp(r3, r4, 0x3, r0, r2) 04:25:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfc00, 0x1}}, 0x1c) 04:25:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff00000000000000, 0x1}}, 0x1c) 04:25:57 executing program 2: r0 = socket$inet6(0xa, 0xa, 0x8) accept4$packet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x14, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@dev={0xfe, 0x80, [], 0x14}, @mcast2={0xff, 0x2, [], 0x1}, @loopback={0x0, 0x1}, 0x8, 0xb2, 0x81, 0x500, 0x2, 0x4000000, r1}) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000440)="0285b57620700ff5a2e594e47ba1d9d28f213f9936aad3a8ac736a34ae643c57cbab6686dc398b8f4ad12d6ee1973e88a634f85bd380bb9cb09a8d1a51d49dd5795ea5f3d92d983b6cbe92856964c21890acff75400a58bc41db91f1756e0adb85e5278159d559e91768f6b4752cd09d002b") ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000000280)=0x0) ioprio_get$pid(0x2, r3) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f00000003c0)=ANY=[@ANYBLOB="030000000000000004400000000000001000000000000000", @ANYPTR=&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="000000000000000000300000000000001900000000000000", @ANYPTR=&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="00000000000000000060000000000000c000000000000000", @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], @ANYBLOB="0000000004000000"]) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x1000) io_setup(0x6, &(0x7f00000001c0)=0x0) io_destroy(r5) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) 04:25:57 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf5ffffff, 0x1}}, 0x1c) 04:25:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x34, 0x40) ioctl$SNDRV_SEQ_IOCTL_DELETE_PORT(r1, 0x40a85321, &(0x7f00000000c0)={{0xfffffffffffffffe}, 'port1\x00', 0x10, 0x10, 0x0, 0x1ff, 0x101, 0x1, 0x4, 0x0, 0x1, 0x1}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x40000000, 0x1}}, 0x1c) 04:25:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5580, 0x1}}, 0x1c) 04:25:57 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) socket$inet6(0xa, 0x80f, 0x100000000) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x5473, &(0x7f00000000c0)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x15554, 0x1}}, 0x1c) 04:25:58 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:58 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8, &(0x7f0000000280)="025ce87d2170") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x80550000, 0x1}}, 0x1c) 04:25:58 executing program 2: r0 = socket$inet6(0xa, 0x80000, 0x9e) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)=0x1000) write$binfmt_misc(r0, &(0x7f0000000100)={'syz1', "276819962212072faabe50367812e8a5699609bae1aa653bfcac1255f73760c7b89a69bbdeca7ee3dd00486158083629e5b5d7de0b3ff242406d78ec5a55e639be71a84c370aa6d10bfc0f504f20a9c6d57a6ee76174cb7c267159b69b5b591567ad92fe4882f890377ee5934fbbbb858c5736a80f21a7af51320d5457bb1528c95fb8fa7afa053ff69d8481cfcd58c53be8d57ee21d4a7f3443101ddd02c2fc566e361c1451cb6656a4a5a4c5766e2b10301f964ead49f8cc827771ed16601790f40dd014aaabc2b5d6944856b7336fdb"}, 0xd5) ftruncate(r0, 0xfa) r1 = fcntl$getown(0xffffffffffffffff, 0x9) getsockname$llc(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000240)=0x10) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x4000, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r2, 0x0, 0x41, &(0x7f0000000280)={'security\x00', 0x3, [{}, {}, {}]}, 0x58) r3 = getpgrp(0x0) kcmp$KCMP_EPOLL_TFD(r1, r3, 0x7, 0xffffffffffffffff, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffffc}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, 0xffffffffffffffff, 0x0) 04:25:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2000000000000, 0x1}}, 0x1c) 04:25:59 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:25:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f00000001c0)) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) fcntl$getownex(r1, 0x10, &(0x7f0000000100)) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, &(0x7f0000000080)={{0xa, 0x4e22, 0x10001, @loopback={0x0, 0x1}, 0x3}, {0xa, 0x4e21, 0x7f, @ipv4={[], [0xff, 0xff]}, 0x9}, 0x3ff, [0x8, 0x46965444, 0x0, 0x6, 0x4, 0x7, 0xdf6b, 0x9]}, 0x5c) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) setxattr(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)=@random={'btrfs.', '/dev/dsp#\x00'}, &(0x7f0000000200)='[\x00', 0x2, 0x1) 04:25:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff00, 0x1}}, 0x1c) 04:25:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl$FICLONE(r0, 0x40049409, r0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:25:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x700, 0x1}}, 0x1c) 04:25:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x7, 0x1}}, 0x1c) 04:25:59 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = add_key$user(&(0x7f0000000080)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000100)="c357c8d8c5465a0dc6a52a79ffe44e46198abf05f764c5f71002722f9b360cef55d532295221e083838a1c53a9a5fd0875809afa9572a5c4b49a28a5da803cb78f437b9f0fdd2d75ead8a531d9a574e916c295adf9f8c42d6d5c03778ef3f5ab4ef5faf0dfd5776875f9a8b3caf6e0b3388b63789b0e4b5ea510a4d7be5c02f64cae70987447e24ab87cbd6d192f6e3e3d7775ee7a4a9c444d2e3b8cf6c100cf7b3134bb3d3c1c990c1b1f77e8294f6754eb03e5de0b1a4fd783a8e4b397b95632945d8fbe805282071e2aee078771d5026c8d47c644af865e8e6c1c6e8aa319209c3935c5a9a2d9ea2ac120b50f62d48c5f4657", 0xf4, 0x0) r2 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000500)='/dev/dsp\x00', 0x40, 0x0) ioctl$TIOCLINUX6(r2, 0x541c, &(0x7f0000000540)={0x6, 0x1ff}) r3 = accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x14) ioctl(r0, 0x9, &(0x7f00000004c0)="74b83cdb31c0ccebd33c49bcbcdc7cedfa8d1bee23e867fff88d359a12a3") setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000380)={0x4, 0x5, 0x9000}, 0x4) keyctl$get_security(0x11, r1, &(0x7f00000002c0)=""/182, 0xb6) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$PIO_SCRNMAP(r4, 0x4b41, &(0x7f00000003c0)="21704d60477d33c8a0632cf45e3ec4b68e91a47737930f0dc6870bc7e841d53e522edd360e0d39919fc72cbf7274c8ad68f0fd1ffc56d5a6bf8e5c807ee56a78babb5f33a5a53f0cceb8db6cb08e8e7744428c60c423b913300efb76630e058d48411789738d09ba7ad8b70ada85aadf37c460ac8158d79195b0c99d066bf8098f28505fd5074f51fb4cda4512d3c06064011312331c565273324717aef9a38ea1ad3ee11631c766c9468d0008bf6c02f0deaf8c803d8cac01ec0bb7ee75dece1c5d0e79616c8ef0e9ea41d2f0b934d4c10a386fc5ac5229793bb1777fcbbb35d000f9f8161bd131e474514628fa639aef6eda723ee932f272") mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) 04:25:59 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x9, 0x1}}, 0x1c) 04:26:00 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0x40007, 0x880) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:00 executing program 4: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5400000000000000, 0x1}}, 0x1c) 04:26:00 executing program 2: r0 = socket$inet6(0xa, 0x0, 0x7ffffffc) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000680)='/dev/input/mouse#\x00', 0x1e81, 0x101000) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r2, 0x6, 0x16, &(0x7f00000006c0)=[{0x3, 0x1}, {0x3, 0x200}, {0xe, 0xffffffffffff40c5}, {}, {0x3, 0xfffffffffffffff9}, {0x4, 0x2}, {0x2, 0x3f}, {0x3, 0x10000}], 0x8) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000080)=0x0) r4 = gettid() getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e23, 0xdb0, @loopback={0x0, 0x1}, 0x4}}, 0x2, 0x10000}, &(0x7f0000000540)=0x90) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000580)={r5, @in6={{0xa, 0x4e23, 0xb89c, @remote={0xfe, 0x80, [], 0xbb}, 0xb950}}, 0x6, 0x8}, &(0x7f0000000640)=0x90) kcmp$KCMP_EPOLL_TFD(r3, r4, 0x7, r1, &(0x7f0000000180)={r1, r0, 0xff}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @dev, @remote}, &(0x7f00000000c0)=0xfffffffffffffd13) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000003c0)=r7) syz_open_dev$midi(&(0x7f0000000200)='/dev/midi#\x00', 0x40, 0x100) bind$packet(r2, &(0x7f0000000700)={0x11, 0x1f, r7, 0x1, 0x5, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x14) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r2, 0x84, 0x71, &(0x7f00000001c0)={r6, 0x9f}, &(0x7f00000007c0)=0xfffffe24) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f00000002c0)={r8, @in6={{0xa, 0x4e21, 0x7, @empty, 0x3}}}, 0x84) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000380)='IPVS\x00') ioctl$VHOST_SET_VRING_KICK(r2, 0x4008af20, &(0x7f0000000100)={0x0, 0xffffffffffffff9c}) modify_ldt$write(0x1, &(0x7f0000000780)={0x101, 0x100000, 0x1000, 0x401, 0x5, 0x7f, 0x3ff, 0x6, 0x8, 0x98}, 0x10) sendmsg$IPVS_CMD_SET_DEST(r1, &(0x7f0000000900)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x24, r9, 0x210, 0x70bd29, 0x25dfdbfe, {0x6}, [@IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x3}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24044000) sendmsg$IPVS_CMD_DEL_SERVICE(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000400)={&(0x7f0000000800)=ANY=[@ANYBLOB="e49c47e7c382b9f91b5af8662b55b7965c000004", @ANYRES16=r9, @ANYBLOB="08012bbd7000ffdbdf250300000008000500050000005b103ddfd5cae1534bf985c3001cf3aecc86f4a75855019bd7847f8b04e20b42f0f7dbb64fae3e58866d9d8992c152cbfa05f00a7fd527ea785153b1d0ef748de50f531470761386bea86389c837"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x20000000) 04:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x6, 0x1}}, 0x1c) 04:26:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x8001) ioctl(r0, 0x7, &(0x7f0000000080)="0700000000f8103a9ae3075c8d8afb8436f1308d852ee05a0ad9") r1 = dup2(r0, r0) ioctl$VHOST_GET_VRING_BASE(r1, 0xc008af12, &(0x7f0000000040)) ioctl$SNDRV_SEQ_IOCTL_GET_CLIENT_POOL(r1, 0xc058534b, &(0x7f00000000c0)={0x81, 0x7, 0x4, 0x9, 0x3, 0x3}) ioctl$int_in(0xffffffffffffffff, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, 0xffffffffffffffff, 0x0) 04:26:00 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x91ffffff00000000, 0x1}}, 0x1c) 04:26:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/fuse\x00', 0x2, 0x0) 04:26:00 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe00000000000000, 0x1}}, 0x1c) 04:26:00 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$ASHMEM_PURGE_ALL_CACHES(r1, 0x770a, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 219.814564] 9pnet: Insufficient options for proto=fd 04:26:01 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 2: r0 = socket$inet6(0xa, 0x80a, 0xfffffffffffffffc) ioctl(r0, 0x8913, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) fcntl$getownex(r1, 0x10, &(0x7f0000000540)={0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000580)={0x0, 0x0}, &(0x7f00000005c0)=0xc) r4 = getegid() getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000600)={0x0}, &(0x7f0000000640)=0xc) stat(&(0x7f0000000680)='./file0\x00', &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r0, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r1, 0x540f, &(0x7f00000007c0)=0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000800)={{{@in6=@remote, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in6=@dev}}, &(0x7f0000000900)=0xe8) getgroups(0x2, &(0x7f0000000940)=[0x0, 0xee00]) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000980)=0x0) stat(&(0x7f00000009c0)='./file0\x00', &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000a80)='./file0\x00', &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = fcntl$getown(r1, 0x9) lstat(&(0x7f0000000b40)='./file0\x00', &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0}) getresgid(&(0x7f0000000c00), &(0x7f0000000c40)=0x0, &(0x7f0000000c80)) sendmsg$unix(r1, &(0x7f0000000e40)={&(0x7f0000000080)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000000100)="fb2b4aa0cffd24eeebdca7476cfe07ba90e648efb97fcd2b3384805567baa35dbc24b9e396017d82b23c77df54293373ec2b2f2c2561536e1dd5304fab0da2616bb6a928b43c2d4e58010e6b512d40d493ee3587e3ad04198a8bd03e31b237787746313908ec17e833c2bae2bfe013af0a53113f73bcda65ffe999a537e8172f03e5aef9b597bee9a4539944f849184e1b4f35d2b7998fc7609e", 0x9a}, {&(0x7f00000001c0)="c0496d75db493ab95671879e28f31a28302003646878b57b81382c7f276f96a15e1b4d567c248125fcddd708f5967d4e39a1a08d7207f7e80f10c8e58b9a87810654f3874e3d8aa6d619f92d9a4d6c86371105eca82a639bce0a42dca8fcbb4073ba05321332", 0x66}, {&(0x7f0000000240)="4c118e5354d5edc99cebf330935c9311f107a4e344dd47288132fbb1fd7e2e02432a73e5f7e4c790677cbfbcefb1a142", 0x30}, {&(0x7f00000002c0)="8e336ffce9edea05cd7da109d20a61ff212742e8e42d574e2d175c5c484ec5368a8063de1a417907cc1b9d", 0x2b}, {&(0x7f0000000300)="caddbd8dd7c9ef7efefc7f1b47c1e5c9acf7e23bca98dbf51d588cd4b42b89dd0a4fae56bd6d5b7623a0bc1e099c6b0902eb1c569e7feaf1503cf3bc2cbc51f119d9bfecd00cf25480e5a4edc8c419911eb8334ad3bd5a01cb8a06b79afb4b75941fb750d0c985c97fa68af7b4ed3287093853b346b382e5952a949e23f19c68", 0x80}, {&(0x7f0000000380)="9eeba7721ad79baf168ac794e75bf355b98c1d7959766ef1c5c840aaf50fcc5f69956a8c86d81d94aedb314d0cd9997139e22ac928856d84460b99eb18f0ab3cefef86505ff2b1f642e689770c5a9ee055b7605671c55cecd5a101b55771001e50baa1ac5c638a11c13c666f277c7b806d5e60871b96ff6c50e92943a6fd174ce925765d0a25864081c15c01e59d3a4aabe9c15b4944e5b8a0dcd86c7ac95fae7565ee070fbb49468bffc1df5bb6026ca31c73939dab2231431e89bf4693bd3e196aaf9f8d56437d7cc8501bf2d9d4c6ddd9775c", 0xd4}, {&(0x7f0000000480)="86321c1c650ff5529a0acf1c7d96773dc1ac9db6c2ed0d8ae851f91c4fba622a0167bdbafa9a9c2c3ca0f63c579a4dc7", 0x30}], 0x7, &(0x7f0000000cc0)=[@rights={0x28, 0x1, 0x1, [r1, r1, r0, r0, r0]}, @rights={0x18, 0x1, 0x1, [r1]}, @rights={0x30, 0x1, 0x1, [r1, r1, r1, r1, r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @rights={0x20, 0x1, 0x1, [r0, r1, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x150, 0x4000000}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x20000, 0x1}}, 0x1c) 04:26:01 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x62f5fb08, 0x1}}, 0x1c) 04:26:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000080)=0x10000, 0x4) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) ioctl$LOOP_SET_DIRECT_IO(r1, 0x4c08, 0x81) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x503, 0x1}}, 0x1c) 04:26:01 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000100)='/dev/dsp#\x00', 0x5, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) write$FUSE_NOTIFY_INVAL_INODE(r1, &(0x7f0000000040)={0x28, 0x2, 0x0, {0x4, 0x7fff, 0x8c65}}, 0x28) 04:26:01 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf401000000000000, 0x1}}, 0x1c) 04:26:01 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.memory_pressure\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0xc0, &(0x7f0000000180)=[@in={0x2, 0x4e20, @multicast1=0xe0000001}, @in={0x2, 0x4e24, @loopback=0x7f000001}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x16}}, @in6={0xa, 0x4e23, 0x1f, @local={0xfe, 0x80, [], 0xaa}, 0x80}, @in6={0xa, 0x4e20, 0x637, @ipv4={[], [0xff, 0xff], @broadcast=0xffffffff}, 0x100}, @in6={0xa, 0x4e20, 0xfff, @mcast1={0xff, 0x1, [], 0x1}, 0x3}, @in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x12}}, @in6={0xa, 0x4e21, 0x3, @mcast1={0xff, 0x1, [], 0x1}, 0x3}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x81, 0x1, 0x200, 0xfffffffffffff000, 0x3, 0xfffffffffffffffc, 0xfffffffffffffe00, 0x8, r1}, &(0x7f0000000340)=0x20) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = socket(0x1e, 0x805, 0x0) r5 = socket(0x1e, 0x5, 0x0) listen(r5, 0x0) accept$packet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x14) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000300)=@req3={0x80000000}, 0x1c) setsockopt$packet_tx_ring(r4, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000, 0x0, 0x2}, 0xfeda) close(r5) sendmsg(r4, &(0x7f0000000140)={&(0x7f0000000740)=@generic={0x10000000001e, "0200000900000000000000000226cc573c080000003724c71e14dd6a739effea1b48006be61ffe0000e103000000f8000004003f010039d8f986ff01000300000004af50d50700000000000000e3ad316a1983000000001d00e0dfcb24281e27800000100076c3979ac40000bd15020078a1dfd300881a8365b1b16d7436"}, 0x80, &(0x7f0000000b00), 0x0, &(0x7f0000000600)=ANY=[]}, 0x0) ioctl(r2, 0x8914, &(0x7f0000000380)="025cc83d6d345f8f762070789f108e48f4134448fad2517a7b284e74994f97763df8b38999f6ab3f5d13b4d48cab7f6688a1b86fcca94b68edb7424ea62b153b193e3ba97cbecd26bf255adb155c210fbbf447b72193c1ba24f02aee0ce3a319d01324c85f266398d5d60e75d8d23ed20f82939c0c5afa4a83ca82ca327b3bc5f35dba34c558230c") inotify_init1(0x80000) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r6, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x30, r6, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r6, 0x84, 0x77, &(0x7f0000000080)={0x0, 0x400, 0x4, [0x2, 0x100000000, 0x100000001, 0x9]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r2, 0x84, 0x10, &(0x7f0000000100)=@sack_info={r7, 0x0, 0x94e}, 0xc) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000280)) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xa00000000000000, 0x1}}, 0x1c) 04:26:01 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfe80000000000000, 0x1}}, 0x1c) [ 220.760844] 9pnet: Insufficient options for proto=fd 04:26:02 executing program 7: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5000000000000, 0x1}}, 0x1c) 04:26:02 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:02 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 220.842580] 9pnet: Insufficient options for proto=fd 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x40020000, 0x1}}, 0x1c) 04:26:02 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:02 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xa000000, 0x1}}, 0x1c) 04:26:02 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe803, 0x1}}, 0x1c) 04:26:02 executing program 2: r0 = socket$inet6(0xa, 0x100080000000a, 0x1) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000140)='/dev/dsp#\x00', 0x100000000, 0x0) syz_open_dev$sndtimer(&(0x7f00000001c0)='/dev/snd/timer\x00', 0x0, 0x2c0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000040)='/dev/dsp#\x00', r1}, 0x10) getsockname$packet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f00000000c0)=0x14) connect$packet(r1, &(0x7f0000000100)={0x11, 0xf8, r2, 0x1, 0xff, 0x6}, 0x14) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfec0, 0x1}}, 0x1c) 04:26:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) write$P9_RLOCK(r1, &(0x7f0000000080)={0x8, 0x35, 0x2, 0x3}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4e68, 0x1}}, 0x1c) 04:26:02 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2bd, 0x1}}, 0x1c) 04:26:02 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) fcntl$notify(r1, 0x402, 0x8) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 221.748708] 9pnet: Insufficient options for proto=fd 04:26:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = memfd_create(&(0x7f0000000080)="9a706f7369785f61636c5f616363657373656d315b00", 0x1) setsockopt$netlink_NETLINK_CAP_ACK(r1, 0x10e, 0xa, &(0x7f00000000c0)=0x100000001, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$sock_void(r0, 0x1, 0x1b, 0x0, 0x0) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf0052686, 0x1}}, 0x1c) 04:26:03 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 1: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x5473, &(0x7f0000000100)=0x1003) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfc000000, 0x1}}, 0x1c) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x24ccc, 0x1}}, 0x1c) 04:26:03 executing program 2: socket$inet6(0xa, 0x1000000000002, 0x0) r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) socket$vsock_dgram(0x28, 0x2, 0x0) socket$bt_rfcomm(0x1f, 0x3, 0x3) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r0, 0x0) utimensat(r0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)={{}, {0x0, 0x7530}}, 0x0) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x684e000000000000, 0x1}}, 0x1c) 04:26:03 executing program 2: socketpair$inet6(0xa, 0x8080a, 0xbb1, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xd5, "030694001acb31a51ad798e03323c4ebe9e7863fae83f96e93c69f4348bb9b13178ad4793eb0fc447617afd1a4a0021136580dabc7d0cefe567428a4405a9c57efcf2b9103fc35c563d6e324f7195149f86e9cd8151e229b6ac7b084fb8fa1441c762d69e7e706301bb3e87cb696cef57b8b81ffd863cd7ee5452362ee919ec383f4ae8052acece6a4f1795e764229713cef8f7d7b00381cf1a42b220ce84fcc97ba7892a569cac6465496f83b55cbee2d5cdb0f256ee7e0a477805009015f69b4999667a1dc8bb0cac84b1884c49d60bfed3004b6"}, &(0x7f0000000080)=0xdd) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000000c0)={0x1, 0x8, 0x80000000, 0x6, r2}, 0x10) lseek(r1, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r3, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = fcntl$dupfd(r3, 0x406, r3) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000100)) setsockopt$inet_MCAST_LEAVE_GROUP(r4, 0x0, 0x2d, &(0x7f00000002c0)={0x20, {{0x2, 0x4e24, @multicast2=0xe0000002}}}, 0x88) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r5, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r5, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r4, 0xc0045516, &(0x7f0000000380)=0x3) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xacf4fb0800000000, 0x1}}, 0x1c) 04:26:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x80) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:03 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4002000000000000, 0x1}}, 0x1c) 04:26:03 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='selinuxvboxnet0\'&trusted\\selinux@\x00', r0}, 0x10) ioctl$KVM_GET_DIRTY_LOG(r1, 0x4010ae42, &(0x7f00000003c0)={0x2710, 0x0, &(0x7f0000ffe000/0x2000)=nil}) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) uselib(&(0x7f0000000380)='./file0\x00') ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3000408, 0x12, r0, 0x9) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffff800, @loopback={0x0, 0x1}, 0x6}}, 0x1f, 0x6}, &(0x7f0000000200)=0x90) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r0, 0x84, 0x1a, &(0x7f00000002c0)=ANY=[@ANYRES32=r3, @ANYBLOB="06000000471875b29000cc5551d699c27753d58c247e984ad431053d07070b767b5bd0142f20af0d19df3e06ec8b35b07d08be137015b571f9968c777b67037dc16e7236b5020cf36cffc5627896b5aae1bc96ee805d5243fbc868e95858033b7d560ca3b94c5e2542fc9880dd32459293b8972b36e2458941e87a66c1095594680c063fd20f60e994b9"], &(0x7f0000000240)=0x8e) 04:26:03 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 222.843339] 9pnet: Insufficient options for proto=fd 04:26:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f0000000080)) 04:26:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x54550100, 0x1}}, 0x1c) 04:26:04 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x6000000, 0x1}}, 0x1c) 04:26:04 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = open(&(0x7f0000000100)='./file0\x00', 0x490200, 0x1) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000140)=0x4100, 0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x280, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r2, 0xc4c85512, &(0x7f00000002c0)={{0x3, 0x1, 0x2, 0xff, 'syz1\x00', 0x7}, 0x1, [0x1, 0x0, 0x7, 0x100, 0x20, 0x8, 0x42, 0x100, 0x1f, 0x5, 0x5f3, 0x40, 0x2, 0x8001, 0x8b, 0x9, 0x4, 0xffff, 0xedd, 0x2, 0x5, 0x7fff, 0x80000000, 0xffffffffffffffb5, 0x6, 0x9, 0x42a, 0x20, 0x3, 0x2, 0x4, 0x80, 0x3, 0x4ea, 0x0, 0x101, 0x7, 0x401, 0x2, 0x6, 0x20, 0x0, 0x9, 0x9, 0x401, 0x7ff, 0x0, 0x6, 0x101, 0xff, 0x7f, 0x3, 0x101, 0x53d, 0x7ff, 0x8000, 0x6, 0x7f, 0x6, 0x9, 0xdc, 0x0, 0x5f, 0x324, 0x9, 0xffff, 0x2, 0x0, 0x0, 0x0, 0xd09, 0x7, 0xffffffffffffff4f, 0x8, 0x0, 0x3, 0x7, 0x2, 0x0, 0x405, 0x200, 0x7, 0x1ff, 0x81, 0xfff, 0x9, 0x9, 0x3, 0x0, 0x100, 0xffffffff, 0x9, 0x6, 0x4, 0xffffffff, 0x3, 0xfff, 0xff, 0x0, 0x7, 0x6, 0x1f, 0x177c, 0x3ff, 0x9, 0x329fbfb, 0xd8f, 0x8, 0x1, 0xec, 0x3, 0x523, 0x1, 0x100000001, 0x4e6b, 0xfe00000000000000, 0x100, 0x4, 0x5, 0x7, 0x2, 0x6, 0x5b1736df, 0x7, 0xcf, 0x1, 0x8, 0x8], {0x77359400}}) r3 = gettid() syz_open_procfs$namespace(r3, &(0x7f0000000080)='ns/mnt\x00') 04:26:04 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x3, 0x1}}, 0x1c) 04:26:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$KDGKBDIACR(r1, 0x4b4a, &(0x7f00000000c0)=""/179) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) getsockopt$IP6T_SO_GET_ENTRIES(r0, 0x29, 0x41, &(0x7f00000002c0)={'security\x00', 0x1000, "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"}, &(0x7f0000000080)=0x1024) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:04 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xa, 0x1}}, 0x1c) 04:26:04 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000080)='/dev/dsp#\x00', 0xfffffffffffffffe, 0x8000000000) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x1802000000000000, 0x1}}, 0x1c) 04:26:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000080)='/proc/self/net/pfkey\x00', 0x200000, 0x0) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000200)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) getpeername$llc(r2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f0000000180)=0x10) 04:26:05 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4000, 0x1}}, 0x1c) 04:26:05 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:05 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rfkill\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240)='/dev/vga_arbiter\x00', 0x220042, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f00000001c0)="6d656d6f72792e7377a5704d6375727247020000", 0x0, 0x0) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f00000000c0)={0x0, 0x7, 0x7ba, 0x3, 0x552e0fd5, 0x24}, &(0x7f0000000100)=0x14) setsockopt$inet_sctp_SCTP_ADD_STREAMS(r1, 0x84, 0x79, &(0x7f0000000080)={r3, 0x4, 0x1}, 0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, &(0x7f0000000140)={r3, 0xb, "654201bd29e60b9932721d"}, &(0x7f0000000180)=0x13) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x1000) write$cgroup_subtree(r4, &(0x7f0000000080)=ANY=[], 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) [ 224.235090] 9pnet: Insufficient options for proto=fd [ 224.240573] 9pnet: Insufficient options for proto=fd 04:26:06 executing program 0: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5, 0x1}}, 0x1c) 04:26:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") ioctl$TIOCSSOFTCAR(r0, 0x541a, &(0x7f0000000080)=0x7) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:06 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5400, 0x1}}, 0x1c) 04:26:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x4000) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x305, 0x1}}, 0x1c) 04:26:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@remote={0xfe, 0x80, [], 0xbb}, 0x100, 0x1, 0x0, 0xe, 0x8, 0x8, 0x2}, &(0x7f00000000c0)=0xffffffffffffff32) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) fadvise64(r0, 0x0, 0x21e, 0x5) r2 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r2, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f000016b000)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000000)="65381dffe70b4eaa7bf5e24ef06a80a0", 0x10) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000ff8000)="0a0775b005e381e5b3b60ced5c54dbb7", 0x10) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfffdb8ec, 0x1}}, 0x1c) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x357dbf44, 0x1}}, 0x1c) 04:26:06 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:06 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0xe2f8, &(0x7f0000000000)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x40100) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000000c0), &(0x7f0000000100)=0xc) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000140)=0x3, 0x4) 04:26:06 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2000000, 0x1}}, 0x1c) 04:26:07 executing program 0: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x7ff, 0x111003) ioctl$KVM_SET_IDENTITY_MAP_ADDR(r1, 0x4008ae48, &(0x7f00000000c0)) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) fcntl$dupfd(r2, 0x0, r2) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) socket$netlink(0x10, 0x3, 0x6) 04:26:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4800, 0x1}}, 0x1c) 04:26:07 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8fbf562, 0x1}}, 0x1c) 04:26:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000000, 0x100010, r0, 0x0) 04:26:07 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xbd02000000000000, 0x1}}, 0x1c) 04:26:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8914, &(0x7f0000000080)="00000000009de0a18a5888b39f6fdc1be8554484496c44b276352ee00462ee7be91952f17e50e6bdd3684502b2aea17616fe827952e04aa0d64c7063053e3d29b6157193630f1d968aa8140cabf56b54ca8eb2fc62a19825f74b596000000096e40adc560a46d504f089fe0fbf32518d0830d121b97bf8dd482c93f9ff1b5e6adbcd7b0f04edc0c31ef353ff0663d3d1092cb2874028512a30c6a179cdb1c9fbac0fc83462e93d33b789db780f87c2bb470a7cea01744cc9a7d94e2c2637c4fbd821c4b1b6dfeb9f2fb7720742f5f17b9c00003d62baf68fe28ab73547343d8c3e84") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x50000, 0x1}}, 0x1c) 04:26:07 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f00000000c0)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:07 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xffffffff00000000, 0x1}}, 0x1c) 04:26:08 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:08 executing program 0: clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:08 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:08 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer2\x00', 0x400800, 0x0) r2 = accept$packet(0xffffffffffffff9c, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000240)=0x14) getsockopt$inet6_tcp_buf(r0, 0x6, 0x16, &(0x7f0000000140)=""/171, &(0x7f0000000300)=0xab) bind$packet(r1, &(0x7f00000002c0)={0x11, 0x10, r3, 0x1, 0x1000, 0x6}, 0x14e) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0), &(0x7f0000000100)=0x14) r4 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0x1, 0x2) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f00000003c0)=""/97) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000040)={0x9, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000380)=0x28) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) 04:26:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf4010000, 0x1}}, 0x1c) 04:26:08 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$FIDEDUPERANGE(r1, 0xc0189436, &(0x7f00000002c0)=ANY=[@ANYBLOB="040000000000000040000000000000000700000000000000", @ANYRES32=r1, @ANYBLOB="008962946bbd16c86a65e5a79ebd41c4000000ff0700000000000000", @ANYRES32=r0, @ANYBLOB="00000000060000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000136934600faf000000000000000001e00000000000000000000000000f3cb588873f03fc0bdd6959d5c81989346634705c2f439931dfce4925a47990e2be5badf90f49616762f308152703f168a2e7bb6c3334a0885566a20d21eb1e666386eadbe9d03a4db7e1452c582e2481ff810a20c4651186bf63038ac4efb5adbefea30da89551a3e25314df0a030c5613d970281bb298b7b94fdca7f", @ANYRES32=r0, @ANYBLOB="00000000020000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="00000000040000000000000000000000000000000000000000000000", @ANYRES32=r0, @ANYBLOB="00000000040000000000000000000000000000000000000000000000", @ANYRES32=r1, @ANYBLOB="000000007f0000000000000000000000000000000000000000000000"]) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:08 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:08 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfe80, 0x1}}, 0x1c) 04:26:08 executing program 2: r0 = syz_open_dev$adsp(&(0x7f0000000080)='/dev/adsp#\x00', 0x0, 0x200) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000000c0)=0x4, 0x4) r1 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r1, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r2 = syz_open_dev$dspn(&(0x7f00000001c0)='/dev/dsp#\x00', 0x400000000000006, 0x0) mbind(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x8003, &(0x7f0000000040)=0x3, 0x2, 0x7) ioctl$int_in(r2, 0x800000c0045003, &(0x7f0000000000)=0xfffffffffffffff9) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) 04:26:09 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x48000000, 0x1}}, 0x1c) 04:26:09 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0xea, 0x40) ioctl$int_in(r0, 0x800000c0045001, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) getrusage(0xffffffffffffffff, &(0x7f0000000080)) execve(&(0x7f0000000140)='./file0\x00', &(0x7f0000000240)=[&(0x7f0000000180)='/dev/dsp#\x00', &(0x7f00000001c0)='/dev/dsp#\x00', &(0x7f0000000200)='*md5sumlproc\x00'], &(0x7f0000000440)=[&(0x7f0000000280)='eth1\x00', &(0x7f00000002c0)='/dev/dsp#\x00', &(0x7f0000000300)='/dev/dsp#\x00', &(0x7f0000000340)='/dev/dsp#\x00', &(0x7f0000000380)='/dev/dsp#\x00', &(0x7f00000003c0)='/dev/dsp#\x00', &(0x7f0000000400)="298e73656c696e75787d2d2900"]) 04:26:09 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x54000000, 0x1}}, 0x1c) 04:26:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000001400)='/dev/dsp\x00', 0x500fff, 0x0) openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x2000, 0x0) ioctl$BLKGETSIZE64(r1, 0x80081272, &(0x7f00000001c0)) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000300)='/dev/input/mice\x00', 0x0, 0x800) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r3}) ioctl$KDGKBSENT(r3, 0x4b48, &(0x7f00000002c0)={0x6, 0x80}) ioctl$KVM_XEN_HVM_CONFIG(r3, 0x4038ae7a, &(0x7f0000000240)={0x690, 0x330, &(0x7f0000000200)="2ba1549b9dd46f5a8f56acb7cf31f5dc6a3578590444e985870c041c18b0bd502cd86e74765364a226f5b7f08b62545401851bc91e125e08", &(0x7f0000001340)="4c3fddded0f400b7d5175d3be48400bd81829dd1887d2df8eb384bfa1437094a7652eabf9ca05f1cdacba4fc4a725939ab14a47bdbc34859f16a66dfdaf01b816e83addbd5e0210a7bed8d960fd8826ee00dfec837b19f889d1e090a51c3dd65e456b5a7406a0e1d6284a0413593f8db0511bb282d36162329c8f94acb90b7759a5c5a7aed54e5c11a531eaffa9d189b938e271e0428ca999b202731dff7053c16a7a5a78336c6b39511cd5e47dc17161c31b5e2b7a362059f6f8dda", 0x38, 0xbc}) ioctl$EVIOCGKEYCODE(r2, 0x80084504, &(0x7f0000001440)=""/93) r4 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r4, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$TIOCSCTTY(r4, 0x540e, 0x101) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000000140)={r0, 0x0, 0x7f, 0x8001, 0x1}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r4, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r4, 0x0, 0x43, &(0x7f00000014c0)={'ipvs\x00'}, &(0x7f0000001500)=0x1e) getsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000340)=""/4096, &(0x7f0000000080)=0x1000) 04:26:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe00, 0x1}}, 0x1c) 04:26:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5000000000000000, 0x1}}, 0x1c) 04:26:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) [ 227.963805] Unknown ioctl 35296 [ 227.967835] Unknown ioctl -2146941692 [ 227.982102] Unknown ioctl 35296 [ 227.987091] Unknown ioctl -2146941692 04:26:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$admmidi(&(0x7f0000000080)='/dev/admmidi#\x00', 0x5, 0x81) ioctl$BLKREPORTZONE(r1, 0xc0101282, &(0x7f00000000c0)={0x4, 0x3, 0x0, [{0x0, 0x3, 0x3, 0x6, 0x400, 0xee9, 0xffffffff}, {0x101, 0x0, 0xb1f, 0x6, 0x9, 0x2, 0x8000}, {0x2, 0x7, 0x5, 0x8000, 0x3, 0x1, 0x6}]}) ioctl$SG_GET_ACCESS_COUNT(r1, 0x2289, &(0x7f00000001c0)) syz_genetlink_get_family_id$fou(&(0x7f0000000200)='fou\x00') getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000340), &(0x7f0000000380)=0x4) r2 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r2, 0x800000c0045005, &(0x7f0000000000)=0x1000) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000240)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(r1, 0xc0505405, &(0x7f00000002c0)={{0xffffffffffffffff, 0x0, 0x3, 0x0, 0x20}, 0x800, 0x0, 0x5}) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r2, 0x0) 04:26:09 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff0f000000000000, 0x1}}, 0x1c) 04:26:09 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:09 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x1, 0x0) sendmsg$key(r1, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000003740)={&(0x7f0000003580)={0x2, 0x5, 0xf6, 0xf, 0x36, 0x0, 0x70bd27, 0x25dfdbff, [@sadb_address={0x3, 0x7, 0x7f, 0xa0, 0x0, @in={0x2, 0x4e24, @multicast1=0xe0000001}}, @sadb_lifetime={0x4, 0x0, 0xd35, 0x80000001, 0xebb8, 0x170}, @sadb_lifetime={0x4, 0x2, 0x8, 0x6343, 0x3, 0x3}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0x1ff, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, @in6={0xa, 0x4e24, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}, @sadb_key={0x15, 0x8, 0x4f0, 0x0, "a26901ef0f4aaf1a0d315cacfd54fd081670e909be8f7f2bf1a363e8fa0e8f9d08ebee0ce83eca89a5475c7f3cd641535c568f4bd47101c229f88f2dc005748a9a9050795e5dc77a503888bad56b281f26ad316d8d253e3a47d196a227efd24addbee161e2fe2e38a6166781c345bb2c68e5ba10b3b7f13975a3afb026f08e5589067ba322b7a8e778d6fc1471d05b36924874c4249fdcdbd3fc7e2de50d"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x101, 0xfffffffffffffa18, 0x18, 0x2, 0x1}, @sadb_key={0x5, 0x9, 0xf8, 0x0, "9837941cef619060f6a21b4a4686861c8349d5218928fef4b6335f9691ac3a"}, @sadb_sa={0x2, 0x1, 0x4d3, 0x1, 0x0, 0xae, 0x4, 0x20000000}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_sec_ctx={0x2, 0x18, 0xffffffff, 0x862, 0x5, "d2fe92b6b6"}]}, 0x1b0}, 0x1}, 0x0) r2 = syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x56, 0x40200) fanotify_mark(r1, 0x76, 0x10, r2, &(0x7f0000000100)='./file0\x00') ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") sendmmsg$nfc_llcp(r1, &(0x7f0000003400)=[{&(0x7f0000000180)={0x27, 0x0, 0x2, 0x7, 0x1ff, 0x7ff, "ee3c990f0898364d6dd11435c0066d0b952407f47b41b594336df8fc74b3b4e45c3ae64a05f597e5db35a9b58ff05da40c21245a8e7a0bd7bf8bf6dee28b2b", 0x37}, 0x60, &(0x7f00000002c0)=[{&(0x7f0000000200)="e0e5f98d6759b1e5d25159dd3e192844014063d723029afaa6047ff746a5dbf490e4bf403e801b01900d73cc2cba77bceff20a248eecc0038473add81affe8e19065994b9d31678248e2c5b6dc0b5ce6e6c4fae5469efc37c4e0eba301f3595e3aa7336b0ffdd408fdf8fc4ed29b1aa368d081ffb5276772c5ce", 0x7a}], 0x1, &(0x7f0000000300)={0x70, 0x10b, 0x0, "e0791323303e1d1859d53237479b77149cebdce4680b4d67b726209c2814aa5bd7cafbea3d83d963dc6496867a579df5ffc8cbcbcd8d8231d4c54be5a23226c8de74c2543d2b58d49eb1335bcddf7a33d00fd11dc7389aa20d"}, 0x70, 0x80}, {&(0x7f0000000380)={0x27, 0x0, 0x0, 0x2, 0xffff, 0x3, "6d7111e0eea1267e948840ce5eb38d0592cc32a5c1c7d93171ec085338e1e12f5e23c3fa0a99da27051b295284b0938307369a2d2f017e3d5db3ea4d4f665c", 0x35}, 0x60, &(0x7f0000001400)=[{&(0x7f0000000400)="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", 0x1000}], 0x1, &(0x7f0000001440)={0x30, 0x11f, 0x59, "f53839c17df12868dba68743d319ae0fda39afb830b695c03c4aa3ce0d05"}, 0x30, 0x20000000}, {&(0x7f0000001480)={0x27, 0x1, 0x1, 0x1, 0x80, 0x200, "4352e09740ac46f9842a3a0df2b69acc8b079fc2be7cee78851037a2cac0ab68b7d9f33a0584df19bfc5b8dfab9c4093c4c37cab2385c6de3e7a289afa0d6c", 0x6}, 0x60, &(0x7f0000001800)=[{&(0x7f0000001500)="b3263070e54f9bee7bf8b6e025a5ba764d3bc1aa6def2b46fb718ddf8d20949aa12865c410f19c13dd72eafe75122f492130dc09d5d8229a97b6c8ddb9e5beb6263eb1111c4efb464e7adb2161588c9bf81ba2de7f50ab4eb25f49f93c3ca6446a46a495c753ccb9e6bb795ac4dc9105bd1c24a89ce712a1e4c45f3fd6f5f905a2b07569f8c068451871c5accad79a45461cee085b9920691745d3b394cb4b209ce306e27d53a9290242896e4069cc4766d4514ec6a8b07c06fd5d902130882a98a90421816286f5f5a23addf76f22f56f8411483d0fdce0319d8dea69707691dcc36769f23ce9c42bd52ea0e0bc1134fbe65e59ba5a77", 0xf7}, {&(0x7f0000001600)="a2ce3c51a82052a5432c4da517f3e02c8a19a6012ae8804cd39993db04ce7537449362c28d91eb3caa75c21430c2ad10d448e475dfd73ad494f1d844f2c15c729d801ddcfbe7bbb37e5b0afa35660d87a85c655d5a091de721e79f9c968ef898977a718513b5d7309e7ff2b3044aa82fa35f41bcb7a823538010a432a309700980f3f5513fb0a435bea4843644db8bc3ba65607a381ec1da4ebf0f450d3910e22f8aa7e46c57b179888118186504e1c5149bc9c7199e32ebdc6de74cb8be90eccc4f5ade9dc629468484bdf5759fd8c0df41c822884770d403c8f95abb24", 0xde}, {&(0x7f0000001700)="1d0a15847fb3f60f1d93eb81edc70d96c75eca340c3e8397d37edd68692f0e861eb2ec9826657f28a5862a0bd5d902017ca39d856bc51e50633da32ca07f36330d215a5347236cab87e08c4976d05a7cd60652deb00517fc744c3f83bf997a87040f4d6955f996ff8c749c758486861fef48a4a3a2d92636db19561867431bc7a0cf4c854851bc431892ccee37850af14e78a0163f8a0313f248ede1df4b451abc82ed615151494bb9452095cfb7e6e2f37e68078089d1d411c87a5c59df73428b971e4638ee45008c5fdb5e4153888abd50ec00700850cc1c670068c3b3b6400e0dd8056e5d", 0xe6}], 0x3, &(0x7f0000001840)={0xb8, 0x185, 0x8, "84456a2c21a40816849d1f1f17be1c8eea204a6dc0bac2003d75accad5ec1ec5f912fd25ef85a256de53697af295802ddb679eb5fc30119232510f8df356656dcb5479f34cd3bb51e0ff5f0dc4cd0d955ec85485be06b39574d96deb19ca753d93f1bccf1e9b265602f809c16fc25542e2da63de3f7c6c84c450b6a4ef0a7b89f57c5ee62ef7ecab6529ed2c9a4cc3f57f696229be6e0b4770a5e147d1766dc99e8fdd"}, 0xb8, 0x41}, {&(0x7f0000001900)={0x27, 0x1, 0x2, 0x7, 0x10000, 0x0, "2a8463115b64ef3c3c4f301cc3b0c366661b9ef0f4784f55d567e72bfb72ed39ec1f052ed600b64839ee4c0e1b05b26be35aa050ca8fad91b1898834a4d944", 0x10}, 0x60, &(0x7f0000001a00)=[{&(0x7f0000001980)="eaee63657f94da3e02809a4fdddd6938df59b2cef4d2e26c0053ae4244cf3f8293153d548a831cf3ee32420c34b319b8d58502b4eea17ffea16a6b901d8fb450d836e9", 0x43}], 0x1, 0x0, 0x0, 0x840}, {&(0x7f0000001a40)={0x27, 0x1, 0x1, 0x5, 0x0, 0xff, "33ecca57d4f67c01d9dab5594046a9ab7b0ae203a23d166ffab19a0388f104d0eeade2cc8bb10512e245e3a606565eed427b7ec73c9a189ada74257069f5e3", 0x26}, 0x60, &(0x7f0000001d00)=[{&(0x7f0000001ac0)="fac8371cb61f146028af0a4dc6cf8ab353d9070d99dd4b19cd08b4fe3e1572186886342af3df2d07ebea763dca0c99edf9b41a33f7f72b3a97a545", 0x3b}, {&(0x7f0000001b00)="ba5b2b373af0fa50f8869fdc8eb21ce1f7dc6bcea9ca74902b6c6ea4a963f8ddb8e9ea0c644bbc45f3d665d521c7d23d22ddf598bbb7f4227c5da0bded541f4a949c5be9947e010841c42b01c738b0693d2ba92a0ac11b2593eee624b4a2db34a1d51e7cf9daf2d9f73131df57e64cdb009eb3cf5108a17a672b285cb9708e5f777e4ad6742df362418656", 0x8b}, {&(0x7f0000001bc0)="6a77aadc40786a5570573cddcc1a6ff6f9a3843b4e2b8e4f5cad56b0ee0def9159bf9b71aa9a68650c09f4611be969e10610562dcb30f58f051c39a5113256c49be52e159a8a1a3a44", 0x49}, {&(0x7f0000001c40)="7b6fca0518ba85d6bb4ce99982d0f3b9ff073845675577f3bd7fd44126f4407264850f4ebc61e306699c77996686d8e0b545b1ebd2d3ee415268e4df94579587ac12e840d55aeba708d619fc58bc219fbbb0d07fff0d53351a081907cf140f22ac0e7456ca9a1728138ac520942ea52e0e9c63cf93ed0a688383e9690499316deb9b647bcb57e6421bc6b4decee405a4a0b92e429c0889ef0de5bf0ddf5f5a86", 0xa0}], 0x4, &(0x7f0000001d40)={0x48, 0x11, 0x5, "7e0d821ffc745cd42b7c0bfbb45e9ef9125f14c9b8767f35758986559e2ac49416fe6d0a5ff9bcdc6d85db871732388b27617712cf426870"}, 0x48, 0x20000841}, {&(0x7f0000001dc0)={0x27, 0x1, 0x2, 0x0, 0x3f, 0x10000, "f01faa5d736d432f297f88554f728b86a1e266e1d4c4f76d675939a126db9885e282ede24d4be8d5fcbd7a8e0de18e4a28f008499a897bbe06ae688e63ac17", 0x10}, 0x60, &(0x7f0000003280)=[{&(0x7f0000001e40)="29f3036556ffead47dd833fd4b69a733719f3bfa08ef50b3fa5fcc076523c20183793bc7259c5949340815a979c4c3aeba235affea29f38a78f32ee838dd1f86955da8427431110e5dd7a695e642d8f8f124599ba54d5d190b567a4ce4e6073ad039c5764279d2fd9118d12b4649fbf9e3a6de15d1f93baa363cc137bfdb566ebe21bf882ff2e7a2012227b6bcb9075707213c6aebc7749a50861c6cba6fdcb8a48bf2e9599feb9a50b9dd68dafcfaecb4c5063afdaad67db4b270", 0xbb}, {&(0x7f0000001f00)="79008035493bb820ceecc4cd6967e6b465cdb3e39fce38dc51d073d1651eb609d904d40a8be8a17a439ed64c2e51f82b2a89ab849ce6aa83ce023b9f5f2460ec1c48f3a89df0bb51892466125352d0f9dc071b55acc4f71f5506231ae52dabf109e87c7598947c6c6d745f02b6c1b00ecec0399aeaff13a7dae20a3406dc03eacc2da78e4e7bef86973cdbcb4e4d198f40b43883ee19c9e22fe1e18e5de4f9cb004bf2ffc13868be525cd26fd5f09175f870cc5b64676aa4501535cd2406dc93cacce563e7401082bc959f260194a77adba20b4c8d05c42cd0ac16e59e2bb1a6c99ec765e78096f19efca84c", 0xec}, {&(0x7f0000002000)="df96ffa75ac626abef5eb67416165bb591c778f50c4cc88ebfb17cdf4b073b080fefb10d167ea2539bb1dcaa5a", 0x2d}, {&(0x7f0000002040)="f17e19edf0f5155bb19e7a44c2ffa9f1448df40ead3ebd526a2061eb379e4325a9d674ce08da84cb374efaaa3d6a41eca1c11ff4e63cbe0981e0dbfbe797d355837c508231568de03265d98536dbe8125395042aaa0f580d1e76fe594fc1abea8bbd6e895dcd1a29342804b0247c94afc4e2b2525a9054a5fe89a322a4767417716ed4c2fcde2c87546fc9cd045fbac15a30637333bc913abb41580e0656313cdd55b537f9f446962c", 0xa9}, {&(0x7f0000002100)="fe9a493ee2ce7f", 0x7}, {&(0x7f0000002140)="788609bde62a3a75470d9354eacc8599613868f4d079f53ede09ed8c3311f37fc18febbe8226e44eb808fec71712c69d3a78948b9ded6831b4052fe886fbdbc372d8b32bde60b8ec271588c873c8ea461fcc373d2a83", 0x56}, {&(0x7f00000021c0)="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", 0x1000}, {&(0x7f00000031c0)="f76bca573691cc34e895f1e2e832275d937e69d54e11a7d7e7e7d0c22dfc9c73732975163be9df8060758c296a8bf020ce8358c4c9f423202121e7a39b3c7e21402b9487726202552aef81a1966cd0160bc0213295d07a1c97c0185ee8be992e50ca3eaa7209fceb500959da3aca3ce180c7576200a3573dde4e6cb442b6a2782420b5674c00001dfb", 0x89}], 0x8, &(0x7f0000003300)=ANY=[@ANYBLOB="d0000000000000009f01000070edffff5792a3f9dd222f78380059d1b8b6bceab5604bcfa53543386b18b81a28153213001a7ca04296abf39d36db4a21de6216cb8b2d833fe970c8d82ca3553ff9a1169be98ad84e873440ed789c2a3059cc1cd7ef0319ae0c30c59c9ad8a10b1a09cbd5c5db9bb38303c5acde4456169a7476114f3ae7b4358ba25d81af9d1e99efc1328576fb82af876b43f9a482d2ba564439734731c01ef029c6945a48761f3bf53b55c7064ff1f53bfe00e80535543b1c5408c41c90c96be5911d102b26560000"], 0xd0, 0x81}], 0x6, 0x10) personality(0x1000000) ioctl$SG_SCSI_RESET(r2, 0x2284, 0x0) r3 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r3, 0x800000c0045005, &(0x7f0000000000)=0x1000) memfd_create(&(0x7f0000000140)='bdev\x00', 0x2) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r3, 0x0) [ 228.645963] 9pnet: Insufficient options for proto=fd 04:26:10 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x1000000, 0x1}}, 0x1c) 04:26:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0xc19) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffc, 0x8010, r1, 0x0) 04:26:10 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff0f, 0x1}}, 0x1c) 04:26:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000080)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xffffff8d, 0x1}}, 0x1c) 04:26:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x503000000000000, 0x1}}, 0x1c) 04:26:10 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, &(0x7f0000000080)={0x0, 0x68, "42e5628f18eec94132eb11fd02f9f8e9f4015366175e05bf0a56612874f33c430106031ab5a20b1f7a68b1ded4a4132f611f7587e8d61d60c13539dc516a1ce4cbe1658fc18077df837659f2f764154f192979f23f536c89a4eb2da02b6dcd8aba1b62f59b211809"}, &(0x7f0000000100)=0x70) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={r2, 0x401}, &(0x7f0000000180)=0x8) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xecb8fdff00000000, 0x1}}, 0x1c) 04:26:10 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe000000, 0x1}}, 0x1c) 04:26:11 executing program 5: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:11 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfec00000, 0x1}}, 0x1c) 04:26:11 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:11 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:11 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:11 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") readv(r0, &(0x7f0000000440)=[{&(0x7f0000000080)=""/219, 0xdb}, {&(0x7f0000000180)=""/68, 0x44}, {&(0x7f0000000200)=""/89, 0x59}, {&(0x7f00000002c0)=""/246, 0xf6}, {&(0x7f00000003c0)=""/70, 0x46}], 0x5) r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ppoll(&(0x7f00000004c0)=[{r0, 0x4001}], 0x1, &(0x7f0000000500)={0x0, 0x989680}, &(0x7f0000000540)={0x2}, 0x8) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) 04:26:12 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x142800, 0x1}}, 0x1c) 04:26:12 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcb000000, 0x1}}, 0x1c) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x600, 0x1}}, 0x1c) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x900000000000000, 0x1}}, 0x1c) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x100000000000000, 0x1}}, 0x1c) 04:26:12 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x1000000000000000, 0x1}}, 0x1c) 04:26:12 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:12 executing program 2: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$int_in(r1, 0x800000c0045005, &(0x7f0000000000)=0x1000) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0xfffffd, 0x2002012, r1, 0x0) bind$bt_sco(r1, &(0x7f0000000080)={0x1f, {0x3, 0x1, 0x3, 0xd2, 0x8a0, 0x7fff}}, 0x8) userfaultfd(0x80000) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0xc80, 0x0) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x91ffffff, 0x1}}, 0x1c) 04:26:12 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff0f0000, 0x1}}, 0x1c) 04:26:12 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x900, 0x1}}, 0x1c) 04:26:13 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x3e8, 0x1}}, 0x1c) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe, 0x1}}, 0x1c) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfffffff5, 0x1}}, 0x1c) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x684e0000, 0x1}}, 0x1c) 04:26:13 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xff000000, 0x1}}, 0x1c) 04:26:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x300, 0x1}}, 0x1c) 04:26:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf5ffffff00000000, 0x1}}, 0x1c) 04:26:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x14280000000000, 0x1}}, 0x1c) 04:26:14 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:14 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x10000000, 0x1}}, 0x1c) 04:26:15 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfc00000000000000, 0x1}}, 0x1c) 04:26:15 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcb00, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8fbf4ac, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x1f4, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x862605f000000000, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x50000000, 0x1}}, 0x1c) 04:26:15 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xf401, 0x1}}, 0x1c) 04:26:15 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x18020000, 0x1}}, 0x1c) [ 234.664588] 9pnet: Insufficient options for proto=fd 04:26:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x2000, 0x1}}, 0x1c) 04:26:16 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x500, 0x1}}, 0x1c) 04:26:16 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcb, 0x1}}, 0x1c) 04:26:16 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfec0000000000000, 0x1}}, 0x1c) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe8030000, 0x1}}, 0x1c) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x240, 0x1}}, 0x1c) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x80fe, 0x1}}, 0x1c) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8055000000000000, 0x1}}, 0x1c) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x300000000000000, 0x1}}, 0x1c) 04:26:16 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r2, &(0x7f0000000780)=[{&(0x7f00000006c0)=""/141, 0x8d}], 0x1) write$P9_RLERROR(r2, &(0x7f0000000480)={0xc, 0x7, 0x0, {0x3, 'io\x00'}}, 0xc) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:16 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xe803000000000000, 0x1}}, 0x1c) 04:26:17 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x700000000000000, 0x1}}, 0x1c) 04:26:17 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xacf4fb08, 0x1}}, 0x1c) 04:26:17 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4, 0x1}}, 0x1c) 04:26:17 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:17 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:18 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x281400, 0x1}}, 0x1c) 04:26:18 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8dffffff00000000, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcc4c020000000000, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xffffff91, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xfc, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x357dbf4400000000, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x1802, 0x1}}, 0x1c) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x48, 0x1}}, 0x1c) 04:26:18 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:18 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xecb8fdff, 0x1}}, 0x1c) 04:26:18 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:18 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 237.600589] 9pnet: Insufficient options for proto=fd 04:26:19 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8055, 0x1}}, 0x1c) 04:26:19 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xa00, 0x1}}, 0x1c) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xcb00000000000000, 0x1}}, 0x1c) 04:26:19 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 238.338121] 9pnet: Insufficient options for proto=fd [ 238.346729] 9pnet: Insufficient options for proto=fd 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x600000000000000, 0x1}}, 0x1c) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5030000, 0x1}}, 0x1c) 04:26:19 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x5455010000000000, 0x1}}, 0x1c) 04:26:19 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x7000000, 0x1}}, 0x1c) 04:26:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x862605f0, 0x1}}, 0x1c) 04:26:20 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x9000000, 0x1}}, 0x1c) [ 239.005947] 9pnet: Insufficient options for proto=fd [ 239.012192] 9pnet: Insufficient options for proto=fd [ 239.351411] 9pnet: Insufficient options for proto=fd [ 239.372374] 9pnet: Insufficient options for proto=fd 04:26:21 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x4002, 0x1}}, 0x1c) 04:26:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 3: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0xc0fe, 0x1}}, 0x1c) 04:26:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x400000000000000, 0x1}}, 0x1c) 04:26:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x8000000000000000, 0x1}}, 0x1c) 04:26:21 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2ff}}, 0x1c) 04:26:21 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 240.550229] 9pnet: Insufficient options for proto=fd [ 240.555881] 9pnet: Insufficient options for proto=fd [ 240.561695] 9pnet: Insufficient options for proto=fd [ 240.567573] 9pnet: Insufficient options for proto=fd 04:26:22 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:22 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:22 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:22 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:22 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) 04:26:22 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:22 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x5580}}, 0x1c) 04:26:22 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 241.549909] 9pnet: Insufficient options for proto=fd [ 241.613623] 9pnet: Insufficient options for proto=fd 04:26:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x4}}, 0x1c) [ 242.081143] 9pnet: Insufficient options for proto=fd 04:26:23 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:23 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) [ 242.516384] 9pnet: Insufficient options for proto=fd [ 242.575664] 9pnet: Insufficient options for proto=fd 04:26:23 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xd}}, 0x1c) [ 243.057998] 9pnet: Insufficient options for proto=fd 04:26:24 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r2 = syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) [ 243.486363] 9pnet: Insufficient options for proto=fd 04:26:24 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:24 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xc}}, 0x1c) 04:26:25 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:25 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xb}}, 0x1c) 04:26:26 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:26 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x3}}, 0x1c) 04:26:26 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 245.618561] 9pnet: Insufficient options for proto=fd 04:26:27 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:27 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:27 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:27 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:27 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x8}}, 0x1c) 04:26:27 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) syz_open_procfs(0x0, &(0x7f0000000080)='io\x00') readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 246.607677] 9pnet: Insufficient options for proto=fd 04:26:28 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1400}}, 0x1c) 04:26:28 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:28 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:29 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:29 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:29 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0xa}}, 0x1c) 04:26:29 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:29 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:29 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x7}}, 0x1c) 04:26:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:30 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x901}}, 0x1c) 04:26:31 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:31 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x10002}}, 0x1c) 04:26:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:32 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2}}, 0x1c) 04:26:32 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:33 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:33 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:33 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:33 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:33 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x4e}}, 0x1c) 04:26:33 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:34 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:34 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:34 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:34 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:34 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x9}}, 0x1c) 04:26:34 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:35 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:35 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:35 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:35 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:35 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x501}}, 0x1c) 04:26:35 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 7 (fault-call:6 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 0 (fault-call:5 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:36 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x11}}, 0x1c) 04:26:36 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:36 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:37 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:37 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x0, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:37 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x42}}, 0x1c) 04:26:37 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000017c0)='/dev/mixer\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x3, 0x31, 0xffffffffffffffff, 0x0) ioctl$RTC_IRQP_READ(r1, 0x8008700b, &(0x7f0000001880)) 04:26:37 executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], {@ipv6={0x86dd, {0x0, 0x6, 'v`Q', 0x30, 0x3a, 0x0, @remote={0xfe, 0x80, [0x7ffffffffffffcd6, 0x0, 0x0, 0x8000000], 0xffffffffffffffff}, @mcast2={0xff, 0x2, [0x0, 0xfffffffffffff000], 0x1}, {[], @icmpv6=@dest_unreach={0xffffff80, 0x0, 0x0, 0x0, [0xc], {0x0, 0x6, "c5961e", 0x0, 0x0, 0x0, @mcast1={0xff, 0x1, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x3], 0x1}, @mcast2={0xff, 0x2, [], 0x1}}}}}}}}, 0x0) 04:26:37 executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup3(r0, r1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@mcast2={0xff, 0x2, [], 0x1}, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fff}}, {{@in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}}, 0x0, @in6=@ipv4={[], [0xff, 0xff], @dev={0xac, 0x14, 0x14}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000}}, 0xe8) [ 256.289520] FAULT_INJECTION: forcing a failure. [ 256.289520] name fail_futex, interval 1, probability 0, space 0, times 1 [ 256.290161] FAULT_INJECTION: forcing a failure. [ 256.290161] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 256.301202] CPU: 1 PID: 14664 Comm: syz-executor0 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 256.321423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 256.330758] Call Trace: [ 256.333338] dump_stack+0x1c9/0x2b4 [ 256.336955] ? dump_stack_print_info.cold.2+0x52/0x52 [ 256.342131] ? __update_load_avg_se+0xb80/0xb80 [ 256.346789] should_fail.cold.4+0xa/0x11 [ 256.350839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 256.355926] ? rb_next+0x140/0x140 [ 256.359453] ? attach_entity_load_avg+0x860/0x860 [ 256.364292] ? kasan_alloc_pages+0x38/0x40 [ 256.368516] ? get_page_from_freelist+0xfe4/0x4620 [ 256.373431] ? trace_hardirqs_on+0x10/0x10 [ 256.377652] ? rb_erase+0x3550/0x3550 [ 256.381443] ? __isolate_free_page+0x690/0x690 [ 256.386016] ? trace_hardirqs_on+0x10/0x10 [ 256.390244] get_futex_key+0x119a/0x2000 [ 256.394301] ? trace_hardirqs_on+0x10/0x10 [ 256.398521] ? __update_load_avg_blocked_se+0x730/0x730 [ 256.403869] ? futex_lock_pi_atomic+0x3a0/0x3a0 [ 256.408523] ? __update_load_avg_se+0xb80/0xb80 [ 256.413186] ? bpf_prog_kallsyms_find+0xde/0x4c0 [ 256.417930] ? trace_hardirqs_on+0x10/0x10 [ 256.422152] ? update_load_avg+0x389/0x27d0 [ 256.426463] ? __account_cfs_rq_runtime+0x770/0x770 [ 256.431463] ? __update_load_avg_blocked_se+0x730/0x730 [ 256.436811] ? attach_entity_load_avg+0x860/0x860 [ 256.441637] ? __update_load_avg_se+0xb80/0xb80 [ 256.446293] ? trace_hardirqs_on+0x10/0x10 [ 256.450513] ? update_load_avg+0x389/0x27d0 [ 256.454818] ? __update_load_avg_blocked_se+0x730/0x730 [ 256.460172] ? attach_entity_load_avg+0x860/0x860 [ 256.465018] ? trace_hardirqs_on+0x10/0x10 [ 256.469244] ? lock_release+0xa30/0xa30 [ 256.473218] ? update_curr+0x4c8/0xc00 [ 256.477094] ? lock_downgrade+0x8f0/0x8f0 [ 256.481231] ? lock_release+0xa30/0xa30 [ 256.485467] ? cpuacct_charge+0x30a/0x5d0 [ 256.489615] ? cgroup_rstat_updated+0xe6/0x470 [ 256.494187] ? trace_hardirqs_on+0x10/0x10 [ 256.498410] ? update_curr+0x200/0xc00 [ 256.502284] ? cpuacct_charge+0x2eb/0x5d0 [ 256.506418] ? __account_cfs_rq_runtime+0x770/0x770 [ 256.511425] ? trace_hardirqs_on+0x10/0x10 [ 256.515645] ? reweight_entity+0x1100/0x1100 [ 256.520043] futex_wake+0x1ac/0x760 [ 256.523660] ? lock_release+0xa30/0xa30 [ 256.527631] ? get_futex_key+0x2000/0x2000 [ 256.531871] ? lock_is_held_type+0x210/0x210 [ 256.536265] ? __account_cfs_rq_runtime+0x770/0x770 [ 256.541274] ? trace_hardirqs_on+0x10/0x10 [ 256.545505] do_futex+0x300/0x27d0 [ 256.549034] ? __update_idle_core+0x304/0x610 [ 256.553519] ? trace_hardirqs_on+0x10/0x10 [ 256.557739] ? trace_hardirqs_on+0x10/0x10 [ 256.561964] ? exit_robust_list+0x290/0x290 [ 256.566268] ? finish_task_switch+0x18a/0x870 [ 256.570753] ? trace_hardirqs_on+0x10/0x10 [ 256.574974] ? trace_hardirqs_on+0x10/0x10 [ 256.579198] ? compat_start_thread+0x80/0x80 [ 256.583604] ? cpu_load_update_active+0x2c0/0x2c0 [ 256.588437] ? trace_hardirqs_on+0x10/0x10 [ 256.592657] ? finish_task_switch+0x1d3/0x870 [ 256.597144] ? finish_task_switch+0x18a/0x870 [ 256.601629] ? lock_acquire+0x1e4/0x540 [ 256.605600] ? __delayacct_add_tsk+0x649/0x780 [ 256.610173] ? lock_acquire+0x1e4/0x540 [ 256.614134] ? __might_fault+0x12b/0x1e0 [ 256.618184] ? lock_acquire+0x1e4/0x540 [ 256.622142] ? __might_fault+0x12b/0x1e0 [ 256.626202] ? lock_downgrade+0x8f0/0x8f0 [ 256.630338] ? trace_hardirqs_off+0xd/0x10 [ 256.634569] ? lock_release+0xa30/0xa30 [ 256.638531] ? check_same_owner+0x340/0x340 [ 256.642845] mm_release+0x46a/0x5f0 [ 256.646460] ? mm_access+0x160/0x160 [ 256.650167] ? kasan_check_write+0x14/0x20 [ 256.654395] ? do_raw_spin_lock+0xc1/0x200 [ 256.658618] ? trace_hardirqs_on+0xd/0x10 [ 256.662752] ? _raw_spin_unlock_irq+0x27/0x70 [ 256.667235] ? acct_collect+0x70c/0x860 [ 256.671195] do_exit+0x567/0x2750 [ 256.674634] ? debug_mutex_wake_waiter+0x630/0x630 [ 256.679549] ? do_raw_spin_lock+0xc1/0x200 [ 256.683781] ? mm_update_next_owner+0x9a0/0x9a0 [ 256.688438] ? _raw_spin_unlock+0x22/0x30 [ 256.692579] ? __mutex_lock+0x848/0x1680 [ 256.696630] ? snd_pcm_oss_sync.isra.29+0x2f9/0x990 [ 256.701632] ? __wake_up_common_lock+0x1d0/0x330 [ 256.706395] ? mutex_trylock+0x2b0/0x2b0 [ 256.710458] ? kasan_check_read+0x11/0x20 [ 256.714589] ? do_raw_spin_unlock+0xa7/0x2f0 [ 256.718984] ? snd_pcm_oss_sync.isra.29+0x35f/0x990 [ 256.723989] ? lock_downgrade+0x8f0/0x8f0 [ 256.728126] ? trace_hardirqs_off+0xd/0x10 [ 256.732359] ? trace_hardirqs_on+0x10/0x10 [ 256.736598] ? kasan_check_write+0x14/0x20 [ 256.740819] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 256.745742] ? snd_timer_notify+0x323/0x3e0 [ 256.750053] ? wait_for_completion+0x8d0/0x8d0 [ 256.754637] ? kasan_check_read+0x11/0x20 [ 256.758774] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 256.763349] ? trace_hardirqs_on+0xd/0x10 [ 256.767487] ? _raw_read_unlock_irq+0x27/0x70 [ 256.772057] ? __snd_pcm_stream_unlock_mode+0x12a/0x150 [ 256.777414] ? memset+0x31/0x40 [ 256.780684] ? __dequeue_signal+0xf9/0x7d0 [ 256.784909] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 256.790434] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.795961] ? recalc_sigpending_tsk+0x180/0x180 [ 256.800700] ? get_signal+0x918/0x1970 [ 256.804572] ? lock_downgrade+0x8f0/0x8f0 [ 256.808708] do_group_exit+0x177/0x440 [ 256.812580] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 256.817146] ? __ia32_sys_exit+0x50/0x50 [ 256.821290] ? kasan_check_write+0x14/0x20 [ 256.825509] ? do_raw_spin_lock+0xc1/0x200 [ 256.829730] get_signal+0x88e/0x1970 [ 256.833434] ? ptrace_notify+0x130/0x130 [ 256.837483] ? __f_unlock_pos+0x19/0x20 [ 256.841443] ? __fget+0x4d5/0x740 [ 256.844892] do_signal+0x9c/0x21c0 [ 256.848421] ? kasan_check_write+0x14/0x20 [ 256.852661] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 256.857573] ? fsnotify+0xbac/0x14e0 [ 256.861372] ? vfs_write+0x2f3/0x560 [ 256.865073] ? setup_sigcontext+0x7d0/0x7d0 [ 256.869384] ? snd_pcm_oss_release+0x290/0x290 [ 256.873965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 256.879838] ? do_vfs_ioctl+0x201/0x1720 [ 256.883888] ? fsnotify_first_mark+0x350/0x350 [ 256.888466] ? __fsnotify_parent+0xcc/0x420 [ 256.892776] ? ioctl_preallocate+0x300/0x300 [ 256.897186] ? __fget_light+0x2f7/0x440 [ 256.901167] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 256.907038] ? fput+0x130/0x1a0 [ 256.910309] exit_to_usermode_loop+0x2e5/0x380 [ 256.914879] ? syscall_slow_exit_work+0x500/0x500 [ 256.919704] ? ksys_ioctl+0x81/0xd0 [ 256.923332] do_syscall_64+0x6be/0x820 [ 256.927232] ? syscall_return_slowpath+0x5e0/0x5e0 [ 256.932151] ? syscall_return_slowpath+0x31d/0x5e0 [ 256.937069] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 256.942078] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 256.946932] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 256.952118] RIP: 0033:0x455ab9 [ 256.955288] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 256.974489] RSP: 002b:00007fe1ec916c68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 256.983150] RAX: 0000000000000000 RBX: 00007fe1ec9176d4 RCX: 0000000000455ab9 [ 256.990425] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 256.997678] RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000 [ 257.004931] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 257.012187] R13: 00000000004bf88b R14: 00000000004cef80 R15: 0000000000000000 [ 257.019455] CPU: 0 PID: 14665 Comm: syz-executor7 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 257.027946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 257.037300] Call Trace: 04:26:38 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 257.039893] dump_stack+0x1c9/0x2b4 [ 257.043522] ? dump_stack_print_info.cold.2+0x52/0x52 [ 257.048713] should_fail.cold.4+0xa/0x11 [ 257.052774] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 257.057865] ? kasan_check_read+0x11/0x20 [ 257.062007] ? lock_acquire+0x1e4/0x540 [ 257.066066] ? lock_release+0xa30/0xa30 [ 257.070026] ? trace_hardirqs_on+0x10/0x10 [ 257.074258] ? lock_downgrade+0x8f0/0x8f0 [ 257.078398] ? __unlock_page_memcg+0x53/0x100 [ 257.082886] ? lock_downgrade+0x8f0/0x8f0 [ 257.087023] ? kasan_check_read+0x11/0x20 [ 257.091159] ? do_raw_spin_unlock+0xa7/0x2f0 [ 257.095549] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.101819] ? PageHuge+0x183/0x2b0 [ 257.105451] ? vma_kernel_pagesize+0x90/0x90 [ 257.109855] ? rcu_read_lock+0x70/0x70 [ 257.113743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.119268] __alloc_pages_nodemask+0x36e/0xdb0 [ 257.123931] ? __alloc_pages_slowpath+0x2d00/0x2d00 [ 257.128959] ? lock_acquire+0x1e4/0x540 [ 257.132924] ? lock_release+0xa30/0xa30 [ 257.136894] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 04:26:38 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) [ 257.142421] alloc_pages_current+0x10c/0x210 [ 257.147504] __get_free_pages+0xc/0x40 [ 257.151390] __tlb_remove_page_size+0x2e5/0x500 [ 257.156058] unmap_page_range+0x105c/0x2220 [ 257.160585] ? vm_normal_page_pmd+0x4d0/0x4d0 [ 257.165087] ? kasan_check_read+0x11/0x20 [ 257.169217] ? rcu_is_watching+0x8c/0x150 [ 257.173345] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 257.177998] ? is_bpf_text_address+0xd7/0x170 [ 257.182492] ? kernel_text_address+0x79/0xf0 [ 257.186906] ? __kernel_text_address+0xd/0x40 [ 257.191406] ? unwind_get_return_address+0x61/0xa0 [ 257.196338] ? save_stack+0xa9/0xd0 [ 257.199952] ? __kasan_slab_free+0x11a/0x170 [ 257.204366] ? kasan_slab_free+0xe/0x10 [ 257.208326] ? __khugepaged_exit+0x429/0x6a0 [ 257.212814] ? lock_acquire+0x1e4/0x540 [ 257.216797] ? pagevec_lru_move_fn+0x1ad/0x270 [ 257.221389] ? lock_downgrade+0x8f0/0x8f0 [ 257.225531] ? kasan_check_read+0x11/0x20 [ 257.229662] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.235194] ? uprobe_munmap+0x14c/0x440 [ 257.239237] ? uprobe_mmap+0xd20/0xd20 [ 257.243109] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 257.247693] unmap_single_vma+0x1a0/0x310 [ 257.251827] unmap_vmas+0x120/0x1f0 [ 257.255440] exit_mmap+0x2b5/0x5a0 [ 257.259056] ? __ia32_sys_munmap+0x80/0x80 [ 257.263272] ? __khugepaged_exit+0x455/0x6a0 [ 257.267677] mmput+0x265/0x620 [ 257.270850] ? lock_downgrade+0x851/0x8f0 [ 257.274977] ? set_mm_exe_file+0x200/0x200 [ 257.279192] ? kasan_check_read+0x11/0x20 [ 257.283317] ? do_raw_spin_unlock+0xa7/0x2f0 [ 257.287702] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 257.292264] ? kasan_check_write+0x14/0x20 [ 257.296474] ? do_raw_spin_lock+0xc1/0x200 [ 257.300696] do_exit+0xea9/0x2750 [ 257.304218] ? mm_update_next_owner+0x9a0/0x9a0 [ 257.308869] ? kasan_check_read+0x11/0x20 [ 257.313006] ? do_raw_spin_unlock+0xa7/0x2f0 [ 257.317404] ? lock_acquire+0x1e4/0x540 [ 257.321358] ? debug_object_active_state+0x2f5/0x4d0 [ 257.326448] ? lock_downgrade+0x8f0/0x8f0 [ 257.330579] ? trace_hardirqs_on+0x10/0x10 [ 257.334793] ? do_raw_spin_unlock+0xa7/0x2f0 [ 257.339190] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 257.343755] ? kasan_check_write+0x14/0x20 [ 257.347980] ? do_raw_spin_lock+0xc1/0x200 [ 257.352202] ? trace_hardirqs_on+0xd/0x10 [ 257.356339] ? trace_hardirqs_on+0x10/0x10 [ 257.360552] ? debug_object_active_state+0x2f5/0x4d0 [ 257.365646] ? kasan_check_read+0x11/0x20 [ 257.369792] ? rcu_is_watching+0x8c/0x150 [ 257.373930] ? mntput_no_expire+0x160/0xbc0 [ 257.378249] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 257.382900] ? lock_release+0xa30/0xa30 [ 257.386857] ? trace_hardirqs_on+0xd/0x10 [ 257.390998] ? note_gp_changes+0x420/0x420 [ 257.395230] ? mntput_no_expire+0x18e/0xbc0 [ 257.399549] ? _raw_spin_unlock+0x22/0x30 [ 257.403679] ? mnt_get_count+0x150/0x150 [ 257.407826] ? dput.part.26+0x276/0x7a0 [ 257.411785] ? memset+0x31/0x40 [ 257.415051] ? __dequeue_signal+0xf9/0x7d0 [ 257.419270] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 257.424791] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.430311] ? recalc_sigpending_tsk+0x180/0x180 [ 257.435048] ? get_signal+0x918/0x1970 [ 257.438914] ? lock_downgrade+0x8f0/0x8f0 [ 257.443040] ? do_raw_spin_lock+0xc1/0x200 [ 257.447258] do_group_exit+0x177/0x440 [ 257.451128] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 257.455689] ? __ia32_sys_exit+0x50/0x50 [ 257.459732] ? kasan_check_write+0x14/0x20 [ 257.463947] ? do_raw_spin_lock+0xc1/0x200 [ 257.468164] get_signal+0x88e/0x1970 [ 257.471863] ? ptrace_notify+0x130/0x130 [ 257.475911] ? __f_unlock_pos+0x19/0x20 [ 257.479869] ? __fget+0x4d5/0x740 [ 257.483318] do_signal+0x9c/0x21c0 [ 257.486855] ? kasan_check_write+0x14/0x20 [ 257.491075] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 257.495988] ? fsnotify+0xbac/0x14e0 [ 257.499689] ? vfs_write+0x2f3/0x560 [ 257.503407] ? setup_sigcontext+0x7d0/0x7d0 [ 257.507718] ? snd_pcm_oss_release+0x290/0x290 [ 257.512288] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 257.517838] ? do_vfs_ioctl+0x201/0x1720 [ 257.521978] ? fsnotify_first_mark+0x350/0x350 [ 257.526539] ? __fsnotify_parent+0xcc/0x420 [ 257.530844] ? ioctl_preallocate+0x300/0x300 [ 257.535244] ? __fget_light+0x2f7/0x440 [ 257.539213] ? cpumask_weight.constprop.5+0x3f/0x3f [ 257.544221] ? fput+0x130/0x1a0 [ 257.547486] exit_to_usermode_loop+0x2e5/0x380 [ 257.552054] ? syscall_slow_exit_work+0x500/0x500 [ 257.556891] ? ksys_ioctl+0x81/0xd0 [ 257.560519] do_syscall_64+0x6be/0x820 [ 257.564388] ? syscall_return_slowpath+0x5e0/0x5e0 [ 257.569305] ? syscall_return_slowpath+0x31d/0x5e0 [ 257.574218] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 257.579227] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 257.584065] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 257.589234] RIP: 0033:0x455ab9 [ 257.592397] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 257.611544] RSP: 002b:00007f4bc374fc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 257.619238] RAX: 0000000000000000 RBX: 00007f4bc37506d4 RCX: 0000000000455ab9 [ 257.626492] RDX: 0000000020003ff8 RSI: 0080000000005001 RDI: 0000000000000013 [ 257.633741] RBP: 000000000072bff0 R08: 0000000000000000 R09: 0000000000000000 04:26:39 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:39 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:39 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x29992}}, 0x1c) 04:26:39 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 257.640990] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 257.648246] R13: 00000000004bf88b R14: 00000000004cef80 R15: 0000000000000000 04:26:39 executing program 4: r0 = socket$inet(0x10, 0x400100400000003, 0x6) sendmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="1b0000001200030207fffd946fa283080700190000000008000085", 0x1b}], 0x1}, 0x0) 04:26:39 executing program 4: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)="2e2f6367726f757000f4456fe8628fd2c3b737c70da9d2839ad41550c1e7d32866348563f15a18be37f2bc33391c0129cc187028aa4f5766c2adc415cd06fc927d2ee5ecd89361e4b48d31cdf4596920eea82d07ced30161ea1d292281a2cbe8c2f951f4e4dca7372b6bde6c4a947ccd8281c1", 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f00000001c0)='io.weight\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000000)=0x80, 0x12) [ 257.933943] netlink: 'syz-executor4': attribute type 25 has an invalid length. [ 257.941389] netlink: 3 bytes leftover after parsing attributes in process `syz-executor4'. 04:26:39 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480), 0x0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:39 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000180)=0x7, 0x4) 04:26:39 executing program 4: r0 = getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)) mknod(&(0x7f0000000100)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f00000002c0), &(0x7f00000004c0)) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='io\x00') ioctl$BINDER_GET_NODE_DEBUG_INFO(r1, 0xc018620b, &(0x7f0000000440)) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, &(0x7f00000005c0)={0x18, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB, @ANYPTR=&(0x7f0000000300)=ANY=[], @ANYPTR=&(0x7f0000000340)=ANY=[@ANYBLOB='8\x00\x00\x00\x00\x00\x00'], @ANYRES64, @ANYBLOB, @ANYBLOB], 0x6, 0x0, &(0x7f0000000580)="209d06ce912c"}) pread64(r1, &(0x7f00000003c0)=""/3, 0x3, 0x0) process_vm_readv(r0, &(0x7f0000000140)=[{&(0x7f0000000200)=""/153, 0x99}], 0x1, &(0x7f00000025c0)=[{&(0x7f00000024c0)=""/204, 0xcc}], 0x1, 0x0) open$dir(&(0x7f0000000380)='./file0\x00', 0x27d, 0x0) 04:26:39 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:40 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x4a}}, 0x1c) 04:26:40 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:40 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:40 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x0, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:40 executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @local={0xfe, 0x80, [], 0xffffffffffffffff}, 0xe}, 0x1c) sendto$inet6(r0, &(0x7f0000c9f000), 0x0, 0xfffffefffffffffe, &(0x7f0000f62fe4)={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}}, 0x1c) 04:26:40 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x800000c0045004, &(0x7f0000003ff8)) 04:26:40 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005452, &(0x7f0000003ff8)) 04:26:40 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000240)={'vcan0\x00', 0x0}) bind$can_raw(r1, &(0x7f0000000080)={0x1d, r2}, 0x10) close(r1) 04:26:40 executing program 4: 04:26:40 executing program 4: 04:26:40 executing program 4: 04:26:40 executing program 4: 04:26:41 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x2bd}}, 0x1c) 04:26:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:41 executing program 4: 04:26:41 executing program 4: 04:26:41 executing program 4: 04:26:41 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:41 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:41 executing program 4: 04:26:41 executing program 4: 04:26:41 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005421, &(0x7f0000003ff8)) 04:26:41 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000003ff8)) 04:26:41 executing program 4: 04:26:41 executing program 4: 04:26:41 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:41 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x80550000}, 0x1c) 04:26:42 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:42 executing program 4: 04:26:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2000}, 0x1c) 04:26:42 executing program 4: 04:26:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xffffff8d}, 0x1c) 04:26:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x357dbf4400000000}, 0x1c) 04:26:42 executing program 4: 04:26:42 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfe80000000000000}, 0x1c) 04:26:42 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:42 executing program 4: 04:26:42 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000003ff8)) 04:26:42 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5030000}, 0x1c) 04:26:42 executing program 4: 04:26:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x0, 0x70}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f000000affc)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000009000)='/dev/audio\x00', 0x40202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) dup2(r2, r1) io_setup(0x5, &(0x7f0000000280)=0x0) io_submit(r3, 0x1, &(0x7f0000002740)=[&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000004c0)}]) 04:26:43 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005008, &(0x7f0000003ff8)) 04:26:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x1000000}, 0x1c) 04:26:43 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:43 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xa}, 0x1c) 04:26:43 executing program 4: syz_emit_ethernet(0x1b2, &(0x7f0000000080)={@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], [], {@ipv4={0x800, {{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote={0xac, 0x14, 0x14, 0xbb}, @local={0xac, 0x14, 0x14, 0xaa}}, @tcp={{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, &(0x7f0000000040)) 04:26:43 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_SIGNAL_MASK(0xffffffffffffffff, 0x4004ae8b, &(0x7f0000001000)=ANY=[@ANYBLOB="9ff2e5"]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000500)="0f0866b8ed008ec066ba4000b000eed2a807000000410f01cab98e0b0000b862000000ba000000000f30b90b0800000f320fc72a8f2a60128f00000000003000000fc7aa00100000", 0x48}], 0x1, 0x0, &(0x7f0000000000), 0x1000000000000040) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000001000/0x2000)=nil}) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 04:26:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5000000000000000}, 0x1c) 04:26:43 executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x2e, 0x313, 0x0, 0x0, {0x3}, [@typed={0x8, 0x58, @fd}]}, 0x1c}, 0x1}, 0x0) 04:26:43 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:43 executing program 5: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x12, &(0x7f00003b9ffc)=0x8, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x7fe, 0x13a) sendto$inet(r0, &(0x7f00000000c0), 0x0, 0x0, &(0x7f0000000100)={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000280)=0x1, 0x4) recvfrom$inet(r0, &(0x7f00000002c0)=""/248, 0xffffffffffffff97, 0x40012003, 0x0, 0x376) 04:26:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x862605f0}, 0x1c) [ 262.308438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. [ 262.319353] netlink: 4 bytes leftover after parsing attributes in process `syz-executor4'. 04:26:43 executing program 4: perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@filter={'filter\x00', 0xe, 0x1, 0x228, [0x0, 0x20000140, 0x20000170, 0x20000338], 0x0, &(0x7f0000000040), &(0x7f0000000140)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x11, 0x0, 0x0, 'erspan0\x00', 'vlan0\x00', 'veth1_to_team\x00', 'teql0\x00', @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], @remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, [], 0xf0, 0x168, 0x198, [@mark_m={'mark_m\x00', 0x18, {{0x0, 0x0, 0x0, 0x2}}}, @owner={'owner\x00', 0x18}]}, [@common=@NFLOG={'NFLOG\x00', 0x50, {{0x0, 0x0, 0x0, 0x0, 0x0, "ffa0969f0ab675d775ff15c0eb1b76558ff0743c958d6317a4255fa401d8257bc9a79c1a2b4f2f579b4e1a1d90472cfbf8a35515cfe1a8a5d20cae9f1d1832e8"}}}]}, @common=@AUDIT={'AUDIT\x00', 0x8}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}]}, 0x2a0) 04:26:43 executing program 5: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0xa, 0x3, 0x10) setsockopt$netlink_NETLINK_RX_RING(r0, 0x29, 0x6, &(0x7f0000000ff0)={0x1c2, 0x0, 0x29, 0x2}, 0x1c2) 04:26:43 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x800000c004500a, &(0x7f0000003ff8)) 04:26:43 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x10}, 0x1c) 04:26:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x48}, 0x1c) 04:26:44 executing program 5 (fault-call:6 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:44 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:44 executing program 4 (fault-call:7 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:44 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:44 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005450, &(0x7f0000003ff8)) 04:26:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x20000000}, 0x1c) 04:26:44 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf4010000}, 0x1c) 04:26:44 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x8000008004500f, &(0x7f0000003ff8)) 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4800}, 0x1c) 04:26:45 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf401000000000000}, 0x1c) 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x862605f000000000}, 0x1c) 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x100000000000000}, 0x1c) 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfec00000}, 0x1c) [ 263.916677] FAULT_INJECTION: forcing a failure. [ 263.916677] name failslab, interval 1, probability 0, space 0, times 0 [ 263.927985] CPU: 1 PID: 15077 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 263.936478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 263.945826] Call Trace: [ 263.948412] dump_stack+0x1c9/0x2b4 [ 263.952031] ? dump_stack_print_info.cold.2+0x52/0x52 [ 263.957211] should_fail.cold.4+0xa/0x11 [ 263.961261] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 263.966348] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 263.971347] ? check_pgprot+0xdf/0x180 [ 263.975218] ? put_page+0x280/0x280 [ 263.978834] ? kasan_check_write+0x14/0x20 [ 263.983049] ? do_raw_spin_lock+0xc1/0x200 [ 263.987279] ? alloc_set_pte+0xaf6/0x1790 [ 263.991421] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 263.996421] ? lock_acquire+0x1e4/0x540 [ 264.000379] ? fs_reclaim_acquire+0x20/0x20 [ 264.004700] ? lock_downgrade+0x8f0/0x8f0 [ 264.008840] ? lock_acquire+0x1e4/0x540 [ 264.012801] ? check_same_owner+0x340/0x340 [ 264.017104] ? check_same_owner+0x340/0x340 [ 264.021419] ? rcu_note_context_switch+0x730/0x730 [ 264.026327] ? rcu_note_context_switch+0x730/0x730 [ 264.031250] __should_failslab+0x124/0x180 [ 264.035467] should_failslab+0x9/0x14 [ 264.039254] kmem_cache_alloc_trace+0x2cb/0x780 [ 264.043905] ? __mutex_lock+0x6c4/0x1680 [ 264.047954] ? find_get_entries_tag+0x1410/0x1410 [ 264.052781] ? snd_pcm_oss_read+0x3f3/0x820 [ 264.057100] snd_pcm_oss_change_params_locked+0x21b/0x3ca0 [ 264.062725] ? mutex_trylock+0x2b0/0x2b0 [ 264.066771] ? mntput_no_expire+0x18e/0xbc0 [ 264.071079] ? do_raw_spin_lock+0xc1/0x200 [ 264.075385] ? mnt_get_count+0x150/0x150 [ 264.079434] ? snd_pcm_hw_param_near.constprop.35+0xb20/0xb20 [ 264.085303] ? shrink_dcache_sb+0x350/0x350 [ 264.089698] ? chown_common+0x730/0x730 [ 264.093659] ? lock_acquire+0x1e4/0x540 [ 264.097624] ? __fdget_pos+0x1bb/0x200 [ 264.101494] ? lock_release+0xa30/0xa30 [ 264.105457] ? check_same_owner+0x340/0x340 [ 264.109771] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.115301] ? _parse_integer+0x13b/0x190 [ 264.119446] ? lock_acquire+0x1e4/0x540 [ 264.123410] ? __might_fault+0x12b/0x1e0 [ 264.127454] ? lock_downgrade+0x8f0/0x8f0 [ 264.131597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.137119] ? fsnotify+0xbac/0x14e0 [ 264.140824] ? check_same_owner+0x340/0x340 [ 264.145133] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 264.150480] snd_pcm_oss_read+0x417/0x820 [ 264.154610] ? snd_pcm_oss_read2+0x470/0x470 [ 264.159000] ? security_file_permission+0x1c2/0x230 [ 264.164002] ? rw_verify_area+0x118/0x360 [ 264.168135] do_iter_read+0x49e/0x650 [ 264.172627] vfs_readv+0x175/0x1c0 [ 264.176148] ? __fget_light+0x2f7/0x440 [ 264.180103] ? compat_rw_copy_check_uvector+0x440/0x440 [ 264.185445] ? fsnotify+0xbac/0x14e0 [ 264.189149] ? vfs_write+0x2f3/0x560 [ 264.192844] ? wait_for_completion+0x8d0/0x8d0 [ 264.197416] ? lock_release+0xa30/0xa30 [ 264.201373] ? fsnotify_first_mark+0x350/0x350 [ 264.205950] ? __fsnotify_parent+0xcc/0x420 [ 264.210257] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 264.215775] ? __fdget_pos+0xde/0x200 [ 264.219556] ? __fdget_raw+0x20/0x20 [ 264.223255] ? __sb_end_write+0xac/0xe0 [ 264.227212] do_readv+0x11a/0x310 [ 264.230654] ? vfs_readv+0x1c0/0x1c0 [ 264.234348] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 264.239871] __x64_sys_readv+0x75/0xb0 [ 264.243744] do_syscall_64+0x1b9/0x820 [ 264.247623] ? syscall_return_slowpath+0x5e0/0x5e0 [ 264.252537] ? syscall_return_slowpath+0x31d/0x5e0 [ 264.257452] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 264.262453] ? prepare_exit_to_usermode+0x291/0x3b0 [ 264.267460] ? perf_trace_sys_enter+0xb10/0xb10 [ 264.272207] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 264.277035] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 264.282212] RIP: 0033:0x455ab9 [ 264.285379] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 264.304542] RSP: 002b:00007fda73b5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5580}, 0x1c) 04:26:45 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 264.312231] RAX: ffffffffffffffda RBX: 00007fda73b5d6d4 RCX: 0000000000455ab9 [ 264.319482] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000013 [ 264.326731] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 264.333982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 264.341242] R13: 00000000004c094d R14: 00000000004d0df8 R15: 0000000000000000 04:26:45 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x281400}, 0x1c) 04:26:45 executing program 5 (fault-call:6 fault-nth:1): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 264.510793] 9pnet: Insufficient options for proto=fd 04:26:46 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:46 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfc000000}, 0x1c) 04:26:46 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000080044df9, &(0x7f0000003ff8)) 04:26:46 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x800000c0045005, &(0x7f0000003ff8)) 04:26:46 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x10000000}, 0x1c) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x142800}, 0x1c) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x8055}, 0x1c) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xffffffff00000000}, 0x1c) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xecb8fdff00000000}, 0x1c) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x684e0000}, 0x1c) 04:26:46 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:46 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x3e8}, 0x1c) [ 265.391643] FAULT_INJECTION: forcing a failure. [ 265.391643] name failslab, interval 1, probability 0, space 0, times 0 [ 265.403159] CPU: 0 PID: 15164 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 265.411647] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 265.420993] Call Trace: [ 265.423579] dump_stack+0x1c9/0x2b4 [ 265.427193] ? dump_stack_print_info.cold.2+0x52/0x52 [ 265.432367] ? __kernel_text_address+0xd/0x40 [ 265.436846] ? unwind_get_return_address+0x61/0xa0 [ 265.441761] should_fail.cold.4+0xa/0x11 [ 265.445805] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 265.450888] ? save_stack+0xa9/0xd0 [ 265.454495] ? save_stack+0x43/0xd0 [ 265.458194] ? kasan_kmalloc+0xc4/0xe0 [ 265.462064] ? kmem_cache_alloc_trace+0x152/0x780 [ 265.466893] ? snd_pcm_oss_change_params_locked+0x21b/0x3ca0 [ 265.472672] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 265.478018] ? snd_pcm_oss_read+0x417/0x820 [ 265.482323] ? vfs_readv+0x175/0x1c0 [ 265.486017] ? do_readv+0x11a/0x310 [ 265.489635] ? __x64_sys_readv+0x75/0xb0 [ 265.493688] ? do_syscall_64+0x1b9/0x820 [ 265.497737] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.503096] ? alloc_set_pte+0xaf6/0x1790 [ 265.507232] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 265.512233] ? lock_acquire+0x1e4/0x540 [ 265.516195] ? fs_reclaim_acquire+0x20/0x20 [ 265.520498] ? lock_downgrade+0x8f0/0x8f0 [ 265.524714] ? lock_acquire+0x1e4/0x540 [ 265.528671] ? check_same_owner+0x340/0x340 [ 265.532973] ? check_same_owner+0x340/0x340 [ 265.537366] ? rcu_note_context_switch+0x730/0x730 [ 265.542281] __should_failslab+0x124/0x180 [ 265.546499] should_failslab+0x9/0x14 [ 265.550291] kmem_cache_alloc_trace+0x2cb/0x780 [ 265.554944] ? __mutex_lock+0x6c4/0x1680 [ 265.558992] ? find_get_entries_tag+0x1410/0x1410 [ 265.563820] ? snd_pcm_oss_read+0x3f3/0x820 [ 265.568122] snd_pcm_oss_change_params_locked+0x253/0x3ca0 [ 265.573733] ? mutex_trylock+0x2b0/0x2b0 [ 265.577784] ? mntput_no_expire+0x18e/0xbc0 [ 265.582092] ? do_raw_spin_lock+0xc1/0x200 [ 265.586306] ? mnt_get_count+0x150/0x150 [ 265.590350] ? snd_pcm_hw_param_near.constprop.35+0xb20/0xb20 [ 265.596215] ? shrink_dcache_sb+0x350/0x350 [ 265.601992] ? chown_common+0x730/0x730 [ 265.605950] ? lock_acquire+0x1e4/0x540 [ 265.609902] ? __fdget_pos+0x1bb/0x200 [ 265.613783] ? lock_release+0xa30/0xa30 [ 265.617736] ? check_same_owner+0x340/0x340 [ 265.622040] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.627561] ? _parse_integer+0x13b/0x190 [ 265.631691] ? lock_acquire+0x1e4/0x540 [ 265.635646] ? __might_fault+0x12b/0x1e0 [ 265.639688] ? lock_downgrade+0x8f0/0x8f0 [ 265.643821] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.649346] ? fsnotify+0xbac/0x14e0 [ 265.653051] ? check_same_owner+0x340/0x340 [ 265.657361] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 265.662535] snd_pcm_oss_read+0x417/0x820 [ 265.666668] ? snd_pcm_oss_read2+0x470/0x470 [ 265.671057] ? security_file_permission+0x1c2/0x230 [ 265.676057] ? rw_verify_area+0x118/0x360 [ 265.680190] do_iter_read+0x49e/0x650 [ 265.683973] vfs_readv+0x175/0x1c0 [ 265.687499] ? __fget_light+0x2f7/0x440 [ 265.691457] ? compat_rw_copy_check_uvector+0x440/0x440 [ 265.696801] ? fsnotify+0xbac/0x14e0 [ 265.700495] ? vfs_write+0x2f3/0x560 [ 265.704191] ? wait_for_completion+0x8d0/0x8d0 [ 265.708752] ? lock_release+0xa30/0xa30 [ 265.712710] ? fsnotify_first_mark+0x350/0x350 [ 265.717270] ? __fsnotify_parent+0xcc/0x420 [ 265.721587] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 265.727102] ? __fdget_pos+0xde/0x200 [ 265.730887] ? __fdget_raw+0x20/0x20 [ 265.734584] ? __sb_end_write+0xac/0xe0 [ 265.738544] do_readv+0x11a/0x310 [ 265.741979] ? vfs_readv+0x1c0/0x1c0 [ 265.745674] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 265.751193] __x64_sys_readv+0x75/0xb0 [ 265.755067] do_syscall_64+0x1b9/0x820 [ 265.758938] ? syscall_return_slowpath+0x5e0/0x5e0 [ 265.763851] ? syscall_return_slowpath+0x31d/0x5e0 [ 265.768761] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 265.773759] ? prepare_exit_to_usermode+0x291/0x3b0 [ 265.778756] ? perf_trace_sys_enter+0xb10/0xb10 [ 265.783416] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 265.788246] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 265.793425] RIP: 0033:0x455ab9 [ 265.796594] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 265.816806] RSP: 002b:00007fda73b5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 265.824936] RAX: ffffffffffffffda RBX: 00007fda73b5d6d4 RCX: 0000000000455ab9 [ 265.832188] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000013 [ 265.839525] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 265.846774] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 265.854028] R13: 00000000004c094d R14: 00000000004d0df8 R15: 0000000000000001 [ 265.862616] 9pnet: Insufficient options for proto=fd 04:26:47 executing program 5 (fault-call:6 fault-nth:2): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:47 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$PPPIOCGFLAGS(r0, 0x8004745a, &(0x7f0000000140)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000100)='./file0\x00', 0x5, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB='trans=fd,rfdNo=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2c69871e8e79f29600"]) ioctl$int_in(r0, 0x5421, &(0x7f0000000180)=0xff) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x240}, 0x1c) 04:26:47 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x0, &(0x7f0000003ff8)) 04:26:47 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:47 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x800000c0045878, &(0x7f0000003ff8)) [ 266.063781] 9pnet: Insufficient options for proto=fd [ 266.081191] 9pnet: Insufficient options for proto=fd 04:26:47 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x800000c0045878, &(0x7f0000003ff8)) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x684e000000000000}, 0x1c) 04:26:47 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) execveat(r0, &(0x7f0000000100)='./file0\x00', &(0x7f00000002c0)=[&(0x7f0000000140)='rfdno', &(0x7f0000000180)='wfdno', &(0x7f00000001c0)='\r%proc\x00', &(0x7f0000000200)='@^!self\x00', &(0x7f0000000240)='/dev/dsp#\x00', &(0x7f0000000280)='\x00'], &(0x7f0000000480)=[&(0x7f0000000300)="2970726f63012500", &(0x7f0000000340)='wfdno', &(0x7f0000000380)='\x00', &(0x7f00000003c0)='/dev/dsp#\x00', &(0x7f0000000440)='trans=fd,'], 0x1800) ioctl$EVIOCGKEYCODE(r0, 0x80084504, &(0x7f0000000580)=""/4096) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) r2 = openat$cuse(0xffffffffffffff9c, &(0x7f00000004c0)='/dev/cuse\x00', 0x2000, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB='M<']) ioctl$KVM_SET_XCRS(r2, 0x4188aea7, &(0x7f0000000500)={0x2, 0x6, [{0x6, 0x0, 0x5}, {0x1, 0x0, 0x6}]}) r3 = msgget$private(0x0, 0x20) msgrcv(r3, &(0x7f0000001580)={0x0, ""/139}, 0x93, 0x3, 0x2000) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) fsetxattr(r0, &(0x7f0000001640)=@known='system.advise\x00', &(0x7f0000001680)="2970726f63012500", 0x8, 0x2) 04:26:47 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf5ffffff00000000}, 0x1c) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xe803}, 0x1c) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x24ccc}, 0x1c) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2000000000000}, 0x1c) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x1802000000000000}, 0x1c) 04:26:47 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffdb8ec}, 0x1c) [ 266.922863] FAULT_INJECTION: forcing a failure. [ 266.922863] name failslab, interval 1, probability 0, space 0, times 0 [ 266.934210] CPU: 0 PID: 15252 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 266.942686] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 266.952024] Call Trace: [ 266.954606] dump_stack+0x1c9/0x2b4 [ 266.958219] ? dump_stack_print_info.cold.2+0x52/0x52 [ 266.963390] ? __kernel_text_address+0xd/0x40 [ 266.967866] ? unwind_get_return_address+0x61/0xa0 [ 266.972782] should_fail.cold.4+0xa/0x11 [ 266.976839] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 266.981934] ? save_stack+0xa9/0xd0 [ 266.985544] ? save_stack+0x43/0xd0 [ 266.989151] ? kasan_kmalloc+0xc4/0xe0 [ 266.993023] ? kmem_cache_alloc_trace+0x152/0x780 [ 266.997856] ? snd_pcm_oss_change_params_locked+0x253/0x3ca0 [ 267.003635] ? snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 267.008979] ? snd_pcm_oss_read+0x417/0x820 [ 267.013280] ? vfs_readv+0x175/0x1c0 [ 267.016975] ? do_readv+0x11a/0x310 [ 267.020591] ? __x64_sys_readv+0x75/0xb0 [ 267.024634] ? do_syscall_64+0x1b9/0x820 [ 267.028684] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.034044] ? alloc_set_pte+0xaf6/0x1790 [ 267.038180] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 267.043182] ? lock_acquire+0x1e4/0x540 [ 267.047663] ? fs_reclaim_acquire+0x20/0x20 [ 267.051973] ? lock_downgrade+0x8f0/0x8f0 [ 267.056103] ? lock_acquire+0x1e4/0x540 [ 267.060070] ? check_same_owner+0x340/0x340 [ 267.064372] ? check_same_owner+0x340/0x340 [ 267.068673] ? rcu_note_context_switch+0x730/0x730 [ 267.073587] __should_failslab+0x124/0x180 [ 267.077803] should_failslab+0x9/0x14 [ 267.081588] kmem_cache_alloc_trace+0x2cb/0x780 [ 267.086241] ? __mutex_lock+0x6c4/0x1680 [ 267.090283] ? find_get_entries_tag+0x1410/0x1410 [ 267.095682] ? snd_pcm_oss_read+0x3f3/0x820 [ 267.099986] snd_pcm_oss_change_params_locked+0x28b/0x3ca0 [ 267.105603] ? mutex_trylock+0x2b0/0x2b0 [ 267.109647] ? mntput_no_expire+0x18e/0xbc0 [ 267.113953] ? do_raw_spin_lock+0xc1/0x200 [ 267.118169] ? mnt_get_count+0x150/0x150 [ 267.122211] ? snd_pcm_hw_param_near.constprop.35+0xb20/0xb20 [ 267.128077] ? shrink_dcache_sb+0x350/0x350 [ 267.132380] ? chown_common+0x730/0x730 [ 267.136337] ? lock_acquire+0x1e4/0x540 [ 267.140467] ? __fdget_pos+0x1bb/0x200 [ 267.145345] ? lock_release+0xa30/0xa30 [ 267.149317] ? check_same_owner+0x340/0x340 [ 267.153622] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.159146] ? _parse_integer+0x13b/0x190 [ 267.163278] ? lock_acquire+0x1e4/0x540 [ 267.167233] ? __might_fault+0x12b/0x1e0 [ 267.171277] ? lock_downgrade+0x8f0/0x8f0 [ 267.175410] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.180935] ? fsnotify+0xbac/0x14e0 [ 267.184629] ? check_same_owner+0x340/0x340 [ 267.188942] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 267.194114] snd_pcm_oss_read+0x417/0x820 [ 267.198252] ? snd_pcm_oss_read2+0x470/0x470 [ 267.202640] ? security_file_permission+0x1c2/0x230 [ 267.207644] ? rw_verify_area+0x118/0x360 [ 267.211776] do_iter_read+0x49e/0x650 [ 267.215561] vfs_readv+0x175/0x1c0 [ 267.219081] ? __fget_light+0x2f7/0x440 [ 267.223055] ? compat_rw_copy_check_uvector+0x440/0x440 [ 267.228396] ? fsnotify+0xbac/0x14e0 [ 267.232097] ? vfs_write+0x2f3/0x560 [ 267.235801] ? wait_for_completion+0x8d0/0x8d0 [ 267.240363] ? lock_release+0xa30/0xa30 [ 267.244329] ? fsnotify_first_mark+0x350/0x350 [ 267.248891] ? __fsnotify_parent+0xcc/0x420 [ 267.253206] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 267.258723] ? __fdget_pos+0xde/0x200 [ 267.262501] ? __fdget_raw+0x20/0x20 [ 267.266195] ? __sb_end_write+0xac/0xe0 [ 267.270161] do_readv+0x11a/0x310 [ 267.273598] ? vfs_readv+0x1c0/0x1c0 [ 267.277293] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 267.282853] __x64_sys_readv+0x75/0xb0 [ 267.286726] do_syscall_64+0x1b9/0x820 [ 267.290594] ? syscall_return_slowpath+0x5e0/0x5e0 [ 267.295504] ? syscall_return_slowpath+0x31d/0x5e0 [ 267.300416] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 267.305417] ? prepare_exit_to_usermode+0x291/0x3b0 [ 267.310418] ? perf_trace_sys_enter+0xb10/0xb10 [ 267.315073] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 267.319900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 267.325071] RIP: 0033:0x455ab9 [ 267.328236] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 267.347401] RSP: 002b:00007fda73b5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 267.355092] RAX: ffffffffffffffda RBX: 00007fda73b5d6d4 RCX: 0000000000455ab9 [ 267.362430] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000013 [ 267.369689] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 267.376940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 267.384201] R13: 00000000004c094d R14: 00000000004d0df8 R15: 0000000000000002 [ 267.395901] 9pnet: Insufficient options for proto=fd 04:26:48 executing program 5 (fault-call:6 fault-nth:3): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:48 executing program 2: r0 = getpid() sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(0xffffffffffffffff, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(0xffffffffffffffff, 0x80000000005001, &(0x7f0000003ff8)) 04:26:48 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005460, &(0x7f0000003ff8)) 04:26:48 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x8dffffff00000000}, 0x1c) 04:26:48 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) ioctl$EVIOCSREP(r0, 0x40084503, &(0x7f0000000100)=[0x10000, 0xf77]) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:48 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:49 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005421, &(0x7f0000003ff8)) 04:26:49 executing program 1 (fault-call:8 fault-nth:0): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5455010000000000}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5000000000000}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xa00000000000000}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4000}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x50}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4}, 0x1c) 04:26:49 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x1f4}, 0x1c) [ 268.340307] 9pnet: Insufficient options for proto=fd [ 268.415890] FAULT_INJECTION: forcing a failure. [ 268.415890] name failslab, interval 1, probability 0, space 0, times 0 [ 268.427186] CPU: 1 PID: 15332 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 268.435685] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 268.445028] Call Trace: [ 268.447613] dump_stack+0x1c9/0x2b4 [ 268.451245] ? dump_stack_print_info.cold.2+0x52/0x52 [ 268.456423] should_fail.cold.4+0xa/0x11 [ 268.460475] ? trace_hardirqs_on+0x10/0x10 [ 268.464702] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 268.469785] ? save_stack+0x43/0xd0 [ 268.473391] ? kasan_kmalloc+0xc4/0xe0 [ 268.477257] ? kasan_slab_alloc+0x12/0x20 [ 268.481386] ? kmem_cache_alloc+0x12e/0x760 [ 268.485691] ? __d_alloc+0xc8/0xd50 [ 268.489297] ? d_alloc+0x96/0x380 [ 268.492735] ? d_alloc_parallel+0x15a/0x1ea0 [ 268.497125] ? lookup_open+0x560/0x1b90 [ 268.501082] ? path_openat+0x26e5/0x5300 [ 268.505126] ? do_sys_open+0x584/0x720 [ 268.508996] ? do_syscall_64+0x1b9/0x820 [ 268.513044] ? trace_hardirqs_on+0x10/0x10 [ 268.517262] ? trace_hardirqs_on+0x10/0x10 [ 268.521483] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 268.526484] ? lock_acquire+0x1e4/0x540 [ 268.530440] ? fs_reclaim_acquire+0x20/0x20 [ 268.534746] ? lock_downgrade+0x8f0/0x8f0 [ 268.538880] ? lock_acquire+0x1e4/0x540 [ 268.542834] ? check_same_owner+0x340/0x340 [ 268.547138] ? rcu_note_context_switch+0x730/0x730 [ 268.552058] ? lock_release+0xa30/0xa30 [ 268.556104] __should_failslab+0x124/0x180 [ 268.560335] should_failslab+0x9/0x14 [ 268.564117] __kmalloc+0x2c8/0x760 [ 268.567642] ? constrain_params_by_rules+0x149/0x1380 [ 268.572814] constrain_params_by_rules+0x149/0x1380 [ 268.577814] ? lock_acquire+0x1e4/0x540 [ 268.581830] ? is_bpf_text_address+0xae/0x170 [ 268.586309] ? lock_downgrade+0x8f0/0x8f0 [ 268.590438] ? snd_pcm_mmap_status_fault+0x400/0x400 [ 268.595522] ? kasan_check_read+0x11/0x20 [ 268.599654] ? rcu_is_watching+0x8c/0x150 [ 268.603802] ? rcu_cleanup_dead_rnp+0x200/0x200 [ 268.608452] ? is_bpf_text_address+0xd7/0x170 [ 268.612938] ? kernel_text_address+0x79/0xf0 [ 268.617330] ? __kernel_text_address+0xd/0x40 [ 268.621804] ? unwind_get_return_address+0x61/0xa0 [ 268.626715] ? __save_stack_trace+0x8d/0xf0 [ 268.631024] ? save_stack+0xa9/0xd0 [ 268.634636] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 268.639640] ? snd_interval_refine+0x428/0x700 [ 268.644201] snd_pcm_hw_refine+0x915/0x11b0 [ 268.648508] ? do_syscall_64+0x1b9/0x820 [ 268.652552] ? constrain_params_by_rules+0x1380/0x1380 [ 268.657818] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 268.662818] ? lock_acquire+0x1e4/0x540 [ 268.666783] ? fs_reclaim_acquire+0x20/0x20 [ 268.671085] ? lock_downgrade+0x8f0/0x8f0 [ 268.675214] ? lock_acquire+0x1e4/0x540 [ 268.679169] ? lock_release+0xa30/0xa30 [ 268.683133] ? check_same_owner+0x340/0x340 [ 268.687436] ? check_same_owner+0x340/0x340 [ 268.691739] ? kasan_unpoison_shadow+0x35/0x50 [ 268.696303] ? kasan_kmalloc+0xc4/0xe0 [ 268.700172] ? memset+0x31/0x40 [ 268.703436] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.708952] ? _snd_pcm_hw_param_min+0x330/0x570 [ 268.713689] snd_pcm_oss_change_params_locked+0x929/0x3ca0 [ 268.719299] ? mutex_trylock+0x2b0/0x2b0 [ 268.723343] ? mntput_no_expire+0x18e/0xbc0 [ 268.727653] ? do_raw_spin_lock+0xc1/0x200 [ 268.731869] ? mnt_get_count+0x150/0x150 [ 268.735915] ? snd_pcm_hw_param_near.constprop.35+0xb20/0xb20 [ 268.741783] ? shrink_dcache_sb+0x350/0x350 [ 268.746088] ? chown_common+0x730/0x730 [ 268.750045] ? lock_acquire+0x1e4/0x540 [ 268.754002] ? __fdget_pos+0x1bb/0x200 [ 268.757885] ? lock_release+0xa30/0xa30 [ 268.761843] ? check_same_owner+0x340/0x340 [ 268.766147] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.771668] ? _parse_integer+0x13b/0x190 [ 268.775821] ? lock_acquire+0x1e4/0x540 [ 268.779780] ? __might_fault+0x12b/0x1e0 [ 268.783827] ? lock_downgrade+0x8f0/0x8f0 [ 268.787972] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.793490] ? fsnotify+0xbac/0x14e0 [ 268.797188] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 268.802370] snd_pcm_oss_read+0x417/0x820 [ 268.806501] ? snd_pcm_oss_read2+0x470/0x470 [ 268.810978] ? security_file_permission+0x1c2/0x230 [ 268.815984] ? rw_verify_area+0x118/0x360 [ 268.820114] do_iter_read+0x49e/0x650 [ 268.823902] vfs_readv+0x175/0x1c0 [ 268.827423] ? __fget_light+0x2f7/0x440 [ 268.831387] ? compat_rw_copy_check_uvector+0x440/0x440 [ 268.836732] ? fsnotify+0xbac/0x14e0 [ 268.840436] ? vfs_write+0x2f3/0x560 [ 268.844130] ? wait_for_completion+0x8d0/0x8d0 [ 268.848701] ? lock_release+0xa30/0xa30 [ 268.852659] ? fsnotify_first_mark+0x350/0x350 [ 268.857230] ? __fsnotify_parent+0xcc/0x420 [ 268.861536] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 268.867056] ? __fdget_pos+0xde/0x200 [ 268.870836] ? __fdget_raw+0x20/0x20 [ 268.874532] ? __sb_end_write+0xac/0xe0 [ 268.878498] do_readv+0x11a/0x310 [ 268.881933] ? vfs_readv+0x1c0/0x1c0 [ 268.885630] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 268.891165] __x64_sys_readv+0x75/0xb0 [ 268.895035] do_syscall_64+0x1b9/0x820 [ 268.898905] ? syscall_return_slowpath+0x5e0/0x5e0 [ 268.903824] ? syscall_return_slowpath+0x31d/0x5e0 [ 268.908733] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 268.913730] ? prepare_exit_to_usermode+0x291/0x3b0 [ 268.918731] ? perf_trace_sys_enter+0xb10/0xb10 [ 268.923385] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 268.928214] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 268.933383] RIP: 0033:0x455ab9 [ 268.936565] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 268.955732] RSP: 002b:00007fda73b5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 268.963422] RAX: ffffffffffffffda RBX: 00007fda73b5d6d4 RCX: 0000000000455ab9 [ 268.970671] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000013 [ 268.978968] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 268.986223] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 268.993473] R13: 00000000004c094d R14: 00000000004d0df8 R15: 0000000000000003 [ 269.001667] 9pnet: Insufficient options for proto=fd 04:26:50 executing program 5 (fault-call:6 fault-nth:4): r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:50 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfffffff5}, 0x1c) 04:26:50 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:50 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000080044d76, &(0x7f0000003ff8)) 04:26:51 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() ioctl$sock_inet6_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000200)) sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) llistxattr(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)=""/191, 0xbf) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:51 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x1000000000000000}, 0x1c) 04:26:51 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x800000c0045007, &(0x7f0000003ff8)) 04:26:51 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xff0f0000}, 0x1c) 04:26:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xe000000}, 0x1c) 04:26:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xa00}, 0x1c) 04:26:51 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000080045006, &(0x7f0000003ff8)) [ 269.940225] 9pnet: Insufficient options for proto=fd [ 270.003249] FAULT_INJECTION: forcing a failure. [ 270.003249] name failslab, interval 1, probability 0, space 0, times 0 [ 270.014614] CPU: 0 PID: 15397 Comm: syz-executor5 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 270.023105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 270.032454] Call Trace: [ 270.035036] dump_stack+0x1c9/0x2b4 [ 270.038656] ? dump_stack_print_info.cold.2+0x52/0x52 [ 270.043836] ? __kernel_text_address+0xd/0x40 [ 270.048324] ? unwind_get_return_address+0x61/0xa0 [ 270.053241] should_fail.cold.4+0xa/0x11 [ 270.057296] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 270.062385] ? snd_interval_refine+0x428/0x700 [ 270.066950] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.072467] ? snd_pcm_hw_refine+0x378/0x11b0 [ 270.076944] ? do_syscall_64+0x1b9/0x820 [ 270.080991] ? constrain_params_by_rules+0x1380/0x1380 [ 270.086252] ? __sanitizer_cov_trace_cmp8+0x18/0x20 [ 270.091250] ? lock_acquire+0x1e4/0x540 [ 270.095207] ? fs_reclaim_acquire+0x20/0x20 [ 270.099513] ? lock_downgrade+0x8f0/0x8f0 [ 270.103650] ? lock_acquire+0x1e4/0x540 [ 270.107610] ? check_same_owner+0x340/0x340 [ 270.111910] ? check_same_owner+0x340/0x340 [ 270.116212] ? rcu_note_context_switch+0x730/0x730 [ 270.121140] __should_failslab+0x124/0x180 [ 270.125360] should_failslab+0x9/0x14 [ 270.129147] kmem_cache_alloc_trace+0x2cb/0x780 [ 270.133796] ? memset+0x31/0x40 [ 270.137057] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.142576] ? _snd_pcm_hw_param_min+0x330/0x570 [ 270.147324] snd_pcm_oss_change_params_locked+0x9c3/0x3ca0 [ 270.152930] ? mutex_trylock+0x2b0/0x2b0 [ 270.156974] ? mntput_no_expire+0x18e/0xbc0 [ 270.161294] ? do_raw_spin_lock+0xc1/0x200 [ 270.165514] ? mnt_get_count+0x150/0x150 [ 270.169557] ? snd_pcm_hw_param_near.constprop.35+0xb20/0xb20 [ 270.175509] ? shrink_dcache_sb+0x350/0x350 [ 270.179828] ? lock_acquire+0x1e4/0x540 [ 270.183781] ? __fdget_pos+0x1bb/0x200 [ 270.187667] ? lock_release+0xa30/0xa30 [ 270.191622] ? check_same_owner+0x340/0x340 [ 270.195934] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.201461] ? _parse_integer+0x13b/0x190 [ 270.205591] ? lock_acquire+0x1e4/0x540 [ 270.209548] ? __might_fault+0x12b/0x1e0 [ 270.213593] ? lock_downgrade+0x8f0/0x8f0 [ 270.217728] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.223254] ? fsnotify+0xbac/0x14e0 [ 270.226953] snd_pcm_oss_make_ready_locked+0xbc/0x130 [ 270.232124] snd_pcm_oss_read+0x417/0x820 [ 270.236256] ? snd_pcm_oss_read2+0x470/0x470 [ 270.240646] ? security_file_permission+0x1c2/0x230 [ 270.245645] ? rw_verify_area+0x118/0x360 [ 270.249784] do_iter_read+0x49e/0x650 [ 270.253569] vfs_readv+0x175/0x1c0 [ 270.257089] ? __fget_light+0x2f7/0x440 [ 270.261048] ? compat_rw_copy_check_uvector+0x440/0x440 [ 270.266392] ? fsnotify+0xbac/0x14e0 [ 270.270087] ? vfs_write+0x2f3/0x560 [ 270.273782] ? wait_for_completion+0x8d0/0x8d0 [ 270.278346] ? lock_release+0xa30/0xa30 [ 270.282304] ? fsnotify_first_mark+0x350/0x350 [ 270.286867] ? __fsnotify_parent+0xcc/0x420 [ 270.291172] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 270.296697] ? __fdget_pos+0xde/0x200 [ 270.300479] ? __fdget_raw+0x20/0x20 [ 270.304192] ? __sb_end_write+0xac/0xe0 [ 270.308150] do_readv+0x11a/0x310 [ 270.311587] ? vfs_readv+0x1c0/0x1c0 [ 270.315286] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 270.320806] __x64_sys_readv+0x75/0xb0 [ 270.324679] do_syscall_64+0x1b9/0x820 [ 270.328550] ? syscall_return_slowpath+0x5e0/0x5e0 [ 270.333462] ? syscall_return_slowpath+0x31d/0x5e0 [ 270.338372] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 270.343370] ? prepare_exit_to_usermode+0x291/0x3b0 [ 270.348369] ? perf_trace_sys_enter+0xb10/0xb10 [ 270.353022] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 270.357858] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 270.363028] RIP: 0033:0x455ab9 [ 270.366193] Code: 1d ba fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 eb b9 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 270.385359] RSP: 002b:00007fda73b5cc68 EFLAGS: 00000246 ORIG_RAX: 0000000000000013 [ 270.393046] RAX: ffffffffffffffda RBX: 00007fda73b5d6d4 RCX: 0000000000455ab9 04:26:51 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:51 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x8dffffff}, 0x1c) [ 270.400299] RDX: 0000000000000001 RSI: 0000000020000480 RDI: 0000000000000013 [ 270.407549] RBP: 000000000072bf48 R08: 0000000000000000 R09: 0000000000000000 [ 270.414799] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 [ 270.422049] R13: 00000000004c094d R14: 00000000004d0df8 R15: 0000000000000004 04:26:51 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 270.560360] 9pnet: Insufficient options for proto=fd 04:26:51 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0, @ANYBLOB="2cd7c13396885797a6b3fc648455d600"]) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4000000}, 0x1c) 04:26:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xacf4fb08}, 0x1c) 04:26:52 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005460, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x91ffffff}, 0x1c) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5000}, 0x1c) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x600}, 0x1c) 04:26:52 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x7ffff000}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xff0f}, 0x1c) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf0052686}, 0x1c) 04:26:52 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x800000c0045002, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xff0f000000000000}, 0x1c) 04:26:52 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x503000000000000}, 0x1c) 04:26:52 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) getsockopt$bt_BT_RCVMTU(r0, 0x112, 0xd, &(0x7f0000000100)=0xfc9, &(0x7f0000000140)=0x2) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f00000001c0)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f00000000c0)="9a776b82a98510ae5cad7339b9ebe218431b6b8ba5a67a7156384f212ca564998eaf3c7d6bccfca07c0b") mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) symlink(&(0x7f0000000100)='./file0\x00', &(0x7f0000000140)='./file0\x00') execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) ioctl$RNDADDTOENTCNT(r0, 0x40045201, &(0x7f0000000180)=0x4) 04:26:52 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:52 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x6}, 0x1c) 04:26:53 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000005006, &(0x7f0000003ff8)) 04:26:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2bd}, 0x1c) 04:26:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x7000000}, 0x1c) 04:26:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x300}, 0x1c) 04:26:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xcb}, 0x1c) 04:26:53 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x400000000000000}, 0x1c) 04:26:53 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x20000443}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:53 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:54 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x800000c0045006, &(0x7f0000003ff8)) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4000000000000000}, 0x1c) 04:26:54 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000100)={0x0, 0xfffffffffffffff7, 0x30, 0x2, 0x10000}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000180)={r2, 0xbe}, 0x8) 04:26:54 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() syz_mount_image$ext4(&(0x7f00000000c0)='ext3\x00', &(0x7f0000000100)='./file0\x00', 0xffe0, 0x2, &(0x7f0000000280)=[{&(0x7f0000000140)="f9a6f740f3f6de359f8249ba0edeb294c123c8adbdda8a8451b700e3a6b9501a52faa87248120221b4382737cd57f826d2ffe75443d8d7ab09b5164488b2cc97036b50ac3d099c880caa06edef24a37a4ca495602b10892f299fe7bab4e37cc33193631629483b91031f947fcbfbe224dad1f16075f5eadf30a36a17f77d42605c117a8759d1ac409806eb1e263c8d5df3d983d674e4c230a58772b9065d8f", 0x9f, 0x13ad}, {&(0x7f0000000200)="509525338d738b35d7fadd9fce1c932400c646135be2459b48129c51b1b8f20ff80a5b31ac9e69f15b2e95905f18d4d9c042eadf20ca4bed25b21b29beca53ea9dc735599eacd6d5eccefb379bde07e0c047a878fb7e83e6d530f4d003b2729748f8b53c53c34f", 0x67, 0x9}], 0x10, &(0x7f00000002c0)={[{@jqfmt_vfsold='jqfmt=vfsold', 0x2c}]}) sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf5ffffff}, 0x1c) [ 272.849333] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 04:26:54 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000080045017, &(0x7f0000003ff8)) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x3000000}, 0x1c) 04:26:54 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x50000}, 0x1c) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x9000000}, 0x1c) 04:26:54 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfc}, 0x1c) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xacf4fb0800000000}, 0x1c) 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x900000000000000}, 0x1c) 04:26:54 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x5) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) [ 273.448129] EXT4-fs (loop5): VFS: Can't find ext4 filesystem 04:26:54 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2000000000000000}, 0x1c) 04:26:55 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005016, &(0x7f0000003ff8)) 04:26:55 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000180)='/dev/dsp#\x00', 0xfffffffffffffffd, 0x80000) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x4800000000000000}, 0x1c) 04:26:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xf401}, 0x1c) 04:26:55 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x8000008010500c, &(0x7f0000003ff8)) 04:26:55 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:55 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000240)={{{@in=@local, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000000340)=0xe8) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000380)={'vcan0\x00', r2}) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100)="b0b53a6163e0cfd45fb0e4c683177513dea9840df156765b8cd1c9c68a5454d6b832d3531f21f0de1c8841872e58223aae94c0d88661d881c71f4dd8e55d3bf27d24a58c3e90fef91cf5ff3ae0de9edb14322fe75baef2a8f0d80a7a568022cc8dee433e077718262643e9756093140e9540f25254c50c8fb9c6d6bb15295ebbd34718335cc9c1281f6dcde67637e6cc62a3301c4aec2df98e2e4e2226fa206362da5a62ade3381b8cf4775528ec5f90ca8b8b417a3a260b5a0222d65bcd654bd9db23cd625d078ca599e9a715bd4d8c18c1f99db4aa26d0fef0810d63102d0f6d6ba299d57d02206dba54a879ee7a96", 0xf0) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x2}, 0x1c) 04:26:55 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:55 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x8fbf562}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x8055000000000000}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xbd02}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x900}, 0x1c) 04:26:56 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x30, 0x2, 0x0, 0xfffffffffffffffd, 0x1, 0x4}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x5400}, 0x1c) 04:26:56 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0xc0045878, &(0x7f0000003ff8)) 04:26:56 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x6) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xc0fe}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x700000000000000}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x62f5fb08}, 0x1c) 04:26:56 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfc00000000000000}, 0x1c) 04:26:56 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) getpid() clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) r1 = shmget$private(0x0, 0x4000, 0x54000002, &(0x7f0000ff9000/0x4000)=nil) shmat(r1, &(0x7f0000ffb000/0x3000)=nil, 0x5000) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:56 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000040049409, &(0x7f0000003ff8)) 04:26:56 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:57 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000080045007, &(0x7f0000003ff8)) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x40020000}, 0x1c) 04:26:57 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x7) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:57 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@posixacl='posixacl', 0x2c}]}}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:57 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) readahead(r0, 0x9, 0xe91) socketpair(0xa, 0x2, 0x0, &(0x7f00000000c0)) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x700}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x684e}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x44bf7d35}, 0x1c) 04:26:57 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000100), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x84, 0x5) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x7}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x200000000000000}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x54000000}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xcb00}, 0x1c) 04:26:57 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xfe80}, 0x1c) 04:26:57 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000000000002, &(0x7f0000003ff8)) 04:26:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x62f5fb0800000000}, 0x1c) 04:26:58 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xa000000}, 0x1c) 04:26:58 executing program 1: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x8) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:58 executing program 3: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xcb000000}, 0x1c) 04:26:58 executing program 5: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x1}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x1ff) r2 = msgget(0x1, 0x20) ioctl$KVM_SET_SIGNAL_MASK(r0, 0x4004ae8b, &(0x7f0000000140)={0xa6, "d61df0976eeaa0e2759e8505c07e2955e4984b46877886485659762cf04cbb14afc329b17dc77cc65ce99f5a4bb7722cfcc1b633f8e8274fd9bed9e0659ce638867e30921cd96c8fc88de586c604e23cba40d60cfa9727b25423e0497d04e4da8d7f3f5b4fc637bc5ac4ddbadfb98c99b0e399f531ead1e0ad3a1b8b011e9607c282961508ff0f4156dc3df363a96fe7c89b897e2ee6fe8953e90835121a5ba8983c3434ee69"}) msgsnd(r2, &(0x7f00000000c0)={0x0, "41f390257fa766f4a73db8b39e9260e1df0f3c32d8cb8d6ba2e68467ba5cab4f4715efe581d80e1ddd84348586cc27d7b34c45337ba4cb03e28e08903dc1d0393ca923ece962fe02456484294b6703977f84ec"}, 0x5b, 0x2f558335931f7f9b) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:58 executing program 0: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x800000800c5012, &(0x7f0000003ff8)) 04:26:58 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) ioctl$SG_GET_REQUEST_TABLE(r0, 0x2286, &(0x7f0000000100)) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:58 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xff00}, 0x1c) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x15554}, 0x1c) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x80fe}, 0x1c) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x14280000000000}, 0x1c) 04:26:59 executing program 7: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x0, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c}) ioctl$ASHMEM_GET_PIN_STATUS(0xffffffffffffffff, 0x7709, 0x0) ioctl$int_in(r0, 0x80000080044df9, &(0x7f0000003ff8)) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x357dbf44}, 0x1c) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0x305}, 0x1c) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xe00000000000000}, 0x1c) [ 278.233046] ================================================================== [ 278.240647] BUG: KASAN: use-after-free in p9_fd_poll+0x280/0x2b0 [ 278.246783] Read of size 8 at addr ffff8801aeec6540 by task kworker/1:4/7207 [ 278.253945] [ 278.255559] CPU: 1 PID: 7207 Comm: kworker/1:4 Not tainted 4.18.0-rc5-next-20180720+ #12 [ 278.263768] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.273118] Workqueue: events p9_poll_workfn [ 278.277508] Call Trace: [ 278.280080] dump_stack+0x1c9/0x2b4 [ 278.283695] ? dump_stack_print_info.cold.2+0x52/0x52 [ 278.288880] ? printk+0xa7/0xcf [ 278.292173] ? kmsg_dump_rewind_nolock+0xe4/0xe4 [ 278.296924] ? p9_fd_poll+0x280/0x2b0 [ 278.300724] print_address_description+0x6c/0x20b [ 278.305655] ? p9_fd_poll+0x280/0x2b0 [ 278.309454] kasan_report.cold.7+0x242/0x30d [ 278.313863] __asan_report_load8_noabort+0x14/0x20 [ 278.318789] p9_fd_poll+0x280/0x2b0 [ 278.322404] p9_poll_workfn+0x463/0x6d0 [ 278.326372] ? p9_read_work+0x1060/0x1060 [ 278.330519] ? lock_acquire+0x1e4/0x540 [ 278.334485] ? process_one_work+0xb9b/0x1ba0 [ 278.338886] ? kasan_check_read+0x11/0x20 [ 278.343031] ? lock_release+0xa30/0xa30 [ 278.347010] ? kasan_check_read+0x11/0x20 [ 278.351153] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.355548] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 278.360119] ? read_word_at_a_time+0x20/0x20 [ 278.364517] ? account_kernel_stack+0x2bd/0x410 [ 278.369192] process_one_work+0xc73/0x1ba0 [ 278.373419] ? trace_hardirqs_on+0x10/0x10 [ 278.377655] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 278.382322] ? lock_repin_lock+0x430/0x430 [ 278.386562] ? __sched_text_start+0x8/0x8 [ 278.390696] ? lock_downgrade+0x8f0/0x8f0 [ 278.394830] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.400367] ? perf_trace_lock+0xde/0x920 [ 278.404514] ? kasan_check_write+0x14/0x20 [ 278.408744] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 278.413679] ? lock_acquire+0x1e4/0x540 [ 278.417641] ? worker_thread+0x3dc/0x13c0 [ 278.421775] ? lock_downgrade+0x8f0/0x8f0 [ 278.425908] ? lock_release+0xa30/0xa30 [ 278.429884] ? kasan_check_read+0x11/0x20 [ 278.434033] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.438436] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 278.443014] ? kasan_check_write+0x14/0x20 [ 278.447236] ? do_raw_spin_lock+0xc1/0x200 [ 278.451455] worker_thread+0x189/0x13c0 [ 278.455422] ? process_one_work+0x1ba0/0x1ba0 [ 278.459928] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 278.464348] ? lock_acquire+0x1e4/0x540 [ 278.468322] ? __kthread_parkme+0xd7/0x1b0 [ 278.472553] ? kasan_check_read+0x11/0x20 [ 278.476690] ? do_raw_spin_unlock+0xa7/0x2f0 04:26:59 executing program 2: r0 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x2}, 0x0) clone(0x200, &(0x7f0000000300), &(0x7f0000000000), &(0x7f0000000040), &(0x7f0000000140)) fcntl$F_GET_RW_HINT(r0, 0x40b, &(0x7f00000001c0)) syz_open_dev$admmidi(&(0x7f0000000180)='/dev/admmidi#\x00', 0x3c21, 0x400000) mknod(&(0x7f0000000540)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', &(0x7f0000000600), &(0x7f0000000100)) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000080)='9p\x00', 0x800000, &(0x7f00000000c0)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r0}, 0x2c, {[{@access_user='access=user', 0x2c}, {@cache_fscache='cache=fscache', 0x2c}, {@debug={'debug', 0x3d, 0x3}, 0x2c}, {@posixacl='posixacl', 0x2c}]}}) readv(r0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/131, 0x83}], 0x1) ioctl$int_in(r0, 0x80000000005001, &(0x7f0000003ff8)) 04:26:59 executing program 6: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) ioctl(r0, 0x8912, &(0x7f0000000280)="025cc83d6d345f8f762070") r1 = socket$inet6(0xa, 0x400000000001, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x1e, &(0x7f0000000080)=0x1, 0x4) bind$inet6(r1, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto$inet6(r1, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback={0x0, 0x1}, 0xcb00000000000000}, 0x1c) [ 278.481082] ? kasan_check_write+0x14/0x20 [ 278.485301] ? trace_hardirqs_on+0xd/0x10 [ 278.489456] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 278.494993] ? __kthread_parkme+0x106/0x1b0 [ 278.499315] kthread+0x345/0x410 [ 278.502680] ? process_one_work+0x1ba0/0x1ba0 [ 278.507187] ? kthread_bind+0x40/0x40 [ 278.510986] ret_from_fork+0x3a/0x50 [ 278.514691] [ 278.516312] Allocated by task 15948: [ 278.520028] save_stack+0x43/0xd0 [ 278.523479] kasan_kmalloc+0xc4/0xe0 [ 278.527190] kmem_cache_alloc_trace+0x152/0x780 [ 278.531849] p9_fd_create+0x1a7/0x3f0 [ 278.535648] p9_client_create+0xa59/0x1537 [ 278.539882] v9fs_session_init+0x21a/0x1a80 [ 278.544203] v9fs_mount+0x7c/0x900 [ 278.547746] legacy_get_tree+0x131/0x460 [ 278.551815] vfs_get_tree+0x1cb/0x5c0 [ 278.555614] do_mount+0x6f2/0x1e20 [ 278.559151] ksys_mount+0x12d/0x140 [ 278.562774] __x64_sys_mount+0xbe/0x150 [ 278.566747] do_syscall_64+0x1b9/0x820 [ 278.570627] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.575792] [ 278.577407] Freed by task 15948: [ 278.580956] save_stack+0x43/0xd0 [ 278.584407] __kasan_slab_free+0x11a/0x170 [ 278.588647] kasan_slab_free+0xe/0x10 [ 278.592542] kfree+0xd9/0x260 [ 278.595650] p9_fd_close+0x416/0x5b0 [ 278.599363] p9_client_create+0xc02/0x1537 [ 278.603589] v9fs_session_init+0x21a/0x1a80 [ 278.607897] v9fs_mount+0x7c/0x900 [ 278.611436] legacy_get_tree+0x131/0x460 [ 278.615489] vfs_get_tree+0x1cb/0x5c0 [ 278.619281] do_mount+0x6f2/0x1e20 [ 278.622821] ksys_mount+0x12d/0x140 [ 278.626437] __x64_sys_mount+0xbe/0x150 [ 278.630401] do_syscall_64+0x1b9/0x820 [ 278.634293] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 278.639499] [ 278.641119] The buggy address belongs to the object at ffff8801aeec6540 [ 278.641119] which belongs to the cache kmalloc-512 of size 512 [ 278.653775] The buggy address is located 0 bytes inside of [ 278.653775] 512-byte region [ffff8801aeec6540, ffff8801aeec6740) [ 278.665474] The buggy address belongs to the page: [ 278.670417] page:ffffea0006bbb180 count:1 mapcount:0 mapping:ffff8801da800940 index:0x0 [ 278.678555] flags: 0x2fffc0000000200(slab) [ 278.682884] raw: 02fffc0000000200 ffffea0006f959c8 ffffea00070c5548 ffff8801da800940 [ 278.690759] raw: 0000000000000000 ffff8801aeec6040 0000000100000006 0000000000000000 [ 278.698631] page dumped because: kasan: bad access detected [ 278.704323] [ 278.705926] Memory state around the buggy address: [ 278.710837] ffff8801aeec6400: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.718181] ffff8801aeec6480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 278.725528] >ffff8801aeec6500: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 278.732871] ^ [ 278.738307] ffff8801aeec6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.745662] ffff8801aeec6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 278.753014] ================================================================== [ 278.760546] Kernel panic - not syncing: panic_on_warn set ... [ 278.760546] [ 278.767919] CPU: 1 PID: 7207 Comm: kworker/1:4 Tainted: G B 4.18.0-rc5-next-20180720+ #12 [ 278.777529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 278.786983] Workqueue: events p9_poll_workfn [ 278.791389] Call Trace: [ 278.793984] dump_stack+0x1c9/0x2b4 [ 278.797620] ? dump_stack_print_info.cold.2+0x52/0x52 [ 278.802829] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 278.807595] panic+0x238/0x4e7 [ 278.810801] ? add_taint.cold.5+0x16/0x16 [ 278.814976] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.819388] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.823917] ? p9_fd_poll+0x280/0x2b0 [ 278.827711] kasan_end_report+0x47/0x4f [ 278.831687] kasan_report.cold.7+0x76/0x30d [ 278.836010] __asan_report_load8_noabort+0x14/0x20 [ 278.840949] p9_fd_poll+0x280/0x2b0 [ 278.844579] p9_poll_workfn+0x463/0x6d0 [ 278.848556] ? p9_read_work+0x1060/0x1060 [ 278.852690] ? lock_acquire+0x1e4/0x540 [ 278.856659] ? process_one_work+0xb9b/0x1ba0 [ 278.861074] ? kasan_check_read+0x11/0x20 [ 278.865220] ? lock_release+0xa30/0xa30 [ 278.869198] ? kasan_check_read+0x11/0x20 [ 278.873336] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.877734] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 278.882321] ? read_word_at_a_time+0x20/0x20 [ 278.886717] ? account_kernel_stack+0x2bd/0x410 [ 278.891380] process_one_work+0xc73/0x1ba0 [ 278.895614] ? trace_hardirqs_on+0x10/0x10 [ 278.899835] ? pwq_dec_nr_in_flight+0x4a0/0x4a0 [ 278.904501] ? lock_repin_lock+0x430/0x430 [ 278.908745] ? __sched_text_start+0x8/0x8 [ 278.912882] ? lock_downgrade+0x8f0/0x8f0 [ 278.917020] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 278.922559] ? perf_trace_lock+0xde/0x920 [ 278.926706] ? kasan_check_write+0x14/0x20 [ 278.930929] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 278.935851] ? lock_acquire+0x1e4/0x540 [ 278.939811] ? worker_thread+0x3dc/0x13c0 [ 278.943945] ? lock_downgrade+0x8f0/0x8f0 [ 278.948089] ? lock_release+0xa30/0xa30 [ 278.952063] ? kasan_check_read+0x11/0x20 [ 278.956212] ? do_raw_spin_unlock+0xa7/0x2f0 [ 278.960616] ? do_raw_spin_trylock+0x1c0/0x1c0 [ 278.965191] ? kasan_check_write+0x14/0x20 [ 278.969427] ? do_raw_spin_lock+0xc1/0x200 [ 278.973673] worker_thread+0x189/0x13c0 [ 278.978409] ? process_one_work+0x1ba0/0x1ba0 [ 278.982896] ? perf_sched_cb_inc+0x2e0/0x2e0 [ 278.987311] ? lock_acquire+0x1e4/0x540 [ 278.991285] ? __kthread_parkme+0xd7/0x1b0 [ 278.995530] ? kasan_check_read+0x11/0x20 [ 278.999674] ? do_raw_spin_unlock+0xa7/0x2f0 [ 279.004075] ? kasan_check_write+0x14/0x20 [ 279.008296] ? trace_hardirqs_on+0xd/0x10 [ 279.012441] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 279.017972] ? __kthread_parkme+0x106/0x1b0 [ 279.022278] kthread+0x345/0x410 [ 279.025629] ? process_one_work+0x1ba0/0x1ba0 [ 279.030111] ? kthread_bind+0x40/0x40 [ 279.033896] ret_from_fork+0x3a/0x50 [ 279.038049] Dumping ftrace buffer: [ 279.041569] (ftrace buffer empty) [ 279.045260] Kernel Offset: disabled [ 279.048865] Rebooting in 86400 seconds..