0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x500000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5452, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:17 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:17 executing program 4: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:17 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x6000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:17 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 4: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x300, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ffffffffffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0189436, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(0x0, 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x100004, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x5000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0045878, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfdfdffffffffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) write$input_event(0xffffffffffffffff, &(0x7f0000002980)={{0x0, 0x7530}, 0x100000000000, 0x12, 0x7}, 0x18) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xffffffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x7000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x5000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, 0x0, 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x6, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585667, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc058565d, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x500000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x100000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x4020940d, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:19 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x600000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x300000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:14:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x700, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:14:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x300, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40086602, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:14:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x500, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 3: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x3, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffffffffffdfd, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:14:21 executing program 4: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:14:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x5, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x100004, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:14:21 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xe7ffffffffffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 4: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x300, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfffffdfd, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x1000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 5 (fault-call:4 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:22 executing program 3 (fault-call:3 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x3000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40045612, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 4 (fault-call:4 fault-nth:0): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x300000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 281.132469] FAULT_INJECTION: forcing a failure. [ 281.132469] name failslab, interval 1, probability 0, space 0, times 1 [ 281.196337] CPU: 1 PID: 9466 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 281.203649] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.213082] Call Trace: [ 281.215788] dump_stack+0x244/0x39d [ 281.219458] ? dump_stack_print_info.cold.1+0x20/0x20 [ 281.224175] FAULT_INJECTION: forcing a failure. [ 281.224175] name failslab, interval 1, probability 0, space 0, times 1 [ 281.224736] should_fail.cold.4+0xa/0x17 [ 281.239912] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.245173] ? check_preemption_disabled+0x48/0x280 [ 281.250252] ? find_held_lock+0x36/0x1c0 [ 281.254384] ? __f_unlock_pos+0x19/0x20 [ 281.258390] ? find_held_lock+0x36/0x1c0 [ 281.262522] ? kasan_check_write+0x14/0x20 [ 281.266807] ? perf_trace_sched_process_exec+0x860/0x860 [ 281.272290] ? wait_for_completion+0x8a0/0x8a0 [ 281.276950] __should_failslab+0x124/0x180 [ 281.281250] should_failslab+0x9/0x14 [ 281.285064] kmem_cache_alloc+0x2be/0x730 [ 281.289270] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.294833] ? check_preemption_disabled+0x48/0x280 [ 281.299916] getname_flags+0xd0/0x590 [ 281.303730] getname+0x19/0x20 [ 281.306963] do_sys_open+0x383/0x700 [ 281.310694] ? filp_open+0x80/0x80 [ 281.314295] ? trace_hardirqs_off_caller+0x310/0x310 [ 281.319422] __x64_sys_open+0x7e/0xc0 [ 281.323252] do_syscall_64+0x1b9/0x820 [ 281.327185] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 281.332562] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.337499] ? trace_hardirqs_off_thunk+0x1a/0x1c 16:14:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40049409, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 281.342364] ? trace_hardirqs_on_caller+0x310/0x310 [ 281.347396] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 281.352430] ? prepare_exit_to_usermode+0x291/0x3b0 [ 281.357466] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.357491] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.357504] RIP: 0033:0x4111a1 [ 281.357520] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 16:14:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xfdfdffff00000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 281.357528] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 281.357547] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 281.357556] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 281.357563] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 281.357570] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 281.357579] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 [ 281.429443] FAULT_INJECTION: forcing a failure. [ 281.429443] name failslab, interval 1, probability 0, space 0, times 0 [ 281.441955] CPU: 0 PID: 9473 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #128 [ 281.452903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.462261] Call Trace: [ 281.464861] dump_stack+0x244/0x39d [ 281.468502] ? dump_stack_print_info.cold.1+0x20/0x20 [ 281.473715] should_fail.cold.4+0xa/0x17 [ 281.477792] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.482933] ? check_preemption_disabled+0x48/0x280 [ 281.487968] ? find_held_lock+0x36/0x1c0 [ 281.492053] ? __f_unlock_pos+0x19/0x20 [ 281.496038] ? find_held_lock+0x36/0x1c0 [ 281.500140] ? kasan_check_write+0x14/0x20 [ 281.504385] ? perf_trace_sched_process_exec+0x860/0x860 [ 281.509860] ? wait_for_completion+0x8a0/0x8a0 [ 281.509883] __should_failslab+0x124/0x180 [ 281.509904] should_failslab+0x9/0x14 [ 281.522538] kmem_cache_alloc+0x2be/0x730 [ 281.526694] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.526711] ? check_preemption_disabled+0x48/0x280 [ 281.526735] getname_flags+0xd0/0x590 [ 281.526754] getname+0x19/0x20 [ 281.537310] do_sys_open+0x383/0x700 [ 281.537329] ? filp_open+0x80/0x80 [ 281.537349] ? trace_hardirqs_off_caller+0x310/0x310 [ 281.537371] __x64_sys_open+0x7e/0xc0 [ 281.537391] do_syscall_64+0x1b9/0x820 [ 281.560536] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 281.560556] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.560578] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.569856] ? trace_hardirqs_on_caller+0x310/0x310 [ 281.569874] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 281.569891] ? prepare_exit_to_usermode+0x291/0x3b0 [ 281.569912] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.599557] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.604754] RIP: 0033:0x4111a1 [ 281.607959] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 281.627301] RSP: 002b:00007f73c04087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 281.635017] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 281.642285] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f73c0408850 [ 281.649570] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 281.656868] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f73c04096d4 [ 281.664140] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 281.671439] CPU: 1 PID: 9484 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 281.678722] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.688074] Call Trace: [ 281.690692] dump_stack+0x244/0x39d [ 281.694342] ? dump_stack_print_info.cold.1+0x20/0x20 [ 281.699557] should_fail.cold.4+0xa/0x17 [ 281.703633] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.708762] ? check_preemption_disabled+0x48/0x280 [ 281.713820] ? find_held_lock+0x36/0x1c0 [ 281.717905] ? __f_unlock_pos+0x19/0x20 [ 281.721899] ? find_held_lock+0x36/0x1c0 [ 281.726013] ? kasan_check_write+0x14/0x20 [ 281.730262] ? perf_trace_sched_process_exec+0x860/0x860 [ 281.735735] ? wait_for_completion+0x8a0/0x8a0 [ 281.740353] __should_failslab+0x124/0x180 [ 281.744604] should_failslab+0x9/0x14 [ 281.748418] kmem_cache_alloc+0x2be/0x730 [ 281.753044] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.758593] ? check_preemption_disabled+0x48/0x280 [ 281.763677] getname_flags+0xd0/0x590 [ 281.767514] getname+0x19/0x20 [ 281.770719] do_sys_open+0x383/0x700 [ 281.774491] ? filp_open+0x80/0x80 [ 281.778043] ? trace_hardirqs_off_caller+0x310/0x310 [ 281.783195] __x64_sys_open+0x7e/0xc0 [ 281.787019] do_syscall_64+0x1b9/0x820 [ 281.790922] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 16:14:22 executing program 5 (fault-call:4 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 281.796297] ? syscall_return_slowpath+0x5e0/0x5e0 [ 281.801234] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.801252] ? trace_hardirqs_on_caller+0x310/0x310 [ 281.801269] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 281.801291] ? prepare_exit_to_usermode+0x291/0x3b0 [ 281.816166] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 281.816188] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 281.816204] RIP: 0033:0x4111a1 [ 281.834465] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 281.853366] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 281.853382] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 281.853392] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 281.853401] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 281.853411] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 281.853420] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 281.865675] FAULT_INJECTION: forcing a failure. [ 281.865675] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 281.909378] CPU: 1 PID: 9505 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 281.916645] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 281.926007] Call Trace: [ 281.928595] dump_stack+0x244/0x39d [ 281.932241] ? dump_stack_print_info.cold.1+0x20/0x20 [ 281.937522] ? print_usage_bug+0xc0/0xc0 [ 281.941605] ? __lock_acquire+0x62f/0x4c20 [ 281.945865] should_fail.cold.4+0xa/0x17 [ 281.949932] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 281.955060] ? mark_held_locks+0x130/0x130 [ 281.959313] ? zap_class+0x640/0x640 [ 281.963036] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 281.968581] ? _kstrtoull+0x188/0x250 [ 281.972385] ? _parse_integer+0x180/0x180 [ 281.976551] ? zap_class+0x640/0x640 [ 281.980281] ? lock_release+0xa00/0xa00 [ 281.984258] ? perf_trace_sched_process_exec+0x860/0x860 [ 281.989759] ? find_held_lock+0x36/0x1c0 [ 281.993844] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 281.999387] ? should_fail+0x22d/0xd01 [ 282.003316] ? get_pid_task+0xd6/0x1a0 [ 282.007211] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.012323] ? check_preemption_disabled+0x48/0x280 [ 282.017398] __alloc_pages_nodemask+0x366/0xea0 [ 282.022072] ? find_held_lock+0x36/0x1c0 [ 282.026139] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 282.031162] ? __f_unlock_pos+0x19/0x20 [ 282.035145] ? find_held_lock+0x36/0x1c0 [ 282.039233] ? trace_hardirqs_off+0xb8/0x310 [ 282.043647] cache_grow_begin+0xa5/0x8c0 [ 282.047710] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.053248] ? check_preemption_disabled+0x48/0x280 [ 282.058289] kmem_cache_alloc+0x66b/0x730 [ 282.062441] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.067979] ? check_preemption_disabled+0x48/0x280 [ 282.073010] getname_flags+0xd0/0x590 [ 282.076856] getname+0x19/0x20 [ 282.080054] do_sys_open+0x383/0x700 [ 282.083790] ? filp_open+0x80/0x80 [ 282.087347] ? trace_hardirqs_off_caller+0x310/0x310 [ 282.092456] __x64_sys_open+0x7e/0xc0 [ 282.096276] do_syscall_64+0x1b9/0x820 [ 282.100189] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 282.105557] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.110489] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.115341] ? trace_hardirqs_on_caller+0x310/0x310 [ 282.120405] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 282.125441] ? prepare_exit_to_usermode+0x291/0x3b0 [ 282.130465] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.135332] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.140523] RIP: 0033:0x4111a1 [ 282.143718] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 282.162619] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 282.170328] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 282.177594] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 282.184863] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 282.192132] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 16:14:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40087602, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 282.199402] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 16:14:23 executing program 3 (fault-call:3 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 282.353896] FAULT_INJECTION: forcing a failure. [ 282.353896] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.365747] CPU: 0 PID: 9515 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #128 [ 282.373026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.382411] Call Trace: [ 282.385031] dump_stack+0x244/0x39d [ 282.388675] ? dump_stack_print_info.cold.1+0x20/0x20 [ 282.393880] ? print_usage_bug+0xc0/0xc0 [ 282.397993] ? __lock_acquire+0x62f/0x4c20 [ 282.402247] should_fail.cold.4+0xa/0x17 [ 282.406321] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.411453] ? mark_held_locks+0x130/0x130 [ 282.415704] ? zap_class+0x640/0x640 [ 282.419429] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 282.424980] ? _kstrtoull+0x188/0x250 [ 282.428792] ? _parse_integer+0x180/0x180 [ 282.432967] ? zap_class+0x640/0x640 [ 282.436690] ? lock_release+0xa00/0xa00 [ 282.440667] ? perf_trace_sched_process_exec+0x860/0x860 [ 282.446148] ? find_held_lock+0x36/0x1c0 [ 282.450225] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.455767] ? should_fail+0x22d/0xd01 [ 282.459681] ? get_pid_task+0xd6/0x1a0 [ 282.463583] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.468695] ? check_preemption_disabled+0x48/0x280 [ 282.473728] __alloc_pages_nodemask+0x366/0xea0 [ 282.478407] ? find_held_lock+0x36/0x1c0 [ 282.478427] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 282.478460] ? __f_unlock_pos+0x19/0x20 [ 282.478480] ? find_held_lock+0x36/0x1c0 [ 282.478531] ? trace_hardirqs_off+0xb8/0x310 [ 282.491567] cache_grow_begin+0xa5/0x8c0 [ 282.491585] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.491606] ? check_preemption_disabled+0x48/0x280 [ 282.500080] kmem_cache_alloc+0x66b/0x730 [ 282.509661] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.509678] ? check_preemption_disabled+0x48/0x280 [ 282.509703] getname_flags+0xd0/0x590 [ 282.509723] getname+0x19/0x20 [ 282.536423] do_sys_open+0x383/0x700 [ 282.540145] ? filp_open+0x80/0x80 [ 282.543736] ? trace_hardirqs_off_caller+0x310/0x310 [ 282.548876] __x64_sys_open+0x7e/0xc0 16:14:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xc, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 282.552694] do_syscall_64+0x1b9/0x820 [ 282.556622] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 282.562001] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.566932] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.571824] ? trace_hardirqs_on_caller+0x310/0x310 [ 282.576848] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 282.581850] ? prepare_exit_to_usermode+0x291/0x3b0 [ 282.586860] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.591694] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.596870] RIP: 0033:0x4111a1 [ 282.600050] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 282.618956] RSP: 002b:00007f73c04087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 282.626663] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 282.633921] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f73c0408850 [ 282.641188] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 16:14:23 executing program 4 (fault-call:4 fault-nth:1): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0xffffffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 282.648438] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f73c04096d4 [ 282.655708] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 282.718909] FAULT_INJECTION: forcing a failure. [ 282.718909] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 282.730742] CPU: 0 PID: 9532 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 282.738020] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 282.747375] Call Trace: [ 282.749977] dump_stack+0x244/0x39d [ 282.753633] ? dump_stack_print_info.cold.1+0x20/0x20 [ 282.758849] ? print_usage_bug+0xc0/0xc0 [ 282.762926] ? __lock_acquire+0x62f/0x4c20 [ 282.767182] should_fail.cold.4+0xa/0x17 [ 282.771256] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.776387] ? mark_held_locks+0x130/0x130 [ 282.780636] ? zap_class+0x640/0x640 [ 282.784357] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 282.789905] ? _kstrtoull+0x188/0x250 [ 282.793721] ? _parse_integer+0x180/0x180 [ 282.797883] ? zap_class+0x640/0x640 [ 282.801623] ? lock_release+0xa00/0xa00 [ 282.805610] ? perf_trace_sched_process_exec+0x860/0x860 [ 282.805632] ? find_held_lock+0x36/0x1c0 16:14:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 282.805654] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.805673] ? should_fail+0x22d/0xd01 [ 282.820713] ? get_pid_task+0xd6/0x1a0 [ 282.820731] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 282.820747] ? check_preemption_disabled+0x48/0x280 [ 282.820769] __alloc_pages_nodemask+0x366/0xea0 [ 282.820784] ? find_held_lock+0x36/0x1c0 [ 282.820818] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 282.820837] ? __f_unlock_pos+0x19/0x20 [ 282.856416] ? find_held_lock+0x36/0x1c0 [ 282.860509] ? trace_hardirqs_off+0xb8/0x310 [ 282.864930] cache_grow_begin+0xa5/0x8c0 [ 282.869005] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 282.874557] ? check_preemption_disabled+0x48/0x280 [ 282.879619] kmem_cache_alloc+0x66b/0x730 [ 282.883775] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 282.889347] ? check_preemption_disabled+0x48/0x280 [ 282.889372] getname_flags+0xd0/0x590 [ 282.889393] getname+0x19/0x20 [ 282.889410] do_sys_open+0x383/0x700 [ 282.905103] ? filp_open+0x80/0x80 [ 282.908654] ? trace_hardirqs_off_caller+0x310/0x310 [ 282.913794] __x64_sys_open+0x7e/0xc0 [ 282.917632] do_syscall_64+0x1b9/0x820 [ 282.921533] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 282.926913] ? syscall_return_slowpath+0x5e0/0x5e0 [ 282.931856] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.936706] ? trace_hardirqs_on_caller+0x310/0x310 [ 282.941727] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 282.946752] ? prepare_exit_to_usermode+0x291/0x3b0 [ 282.946774] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 282.946818] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 282.956655] RIP: 0033:0x4111a1 [ 282.956672] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 282.956680] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 282.956694] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 282.956708] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 283.006186] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 16:14:24 executing program 5 (fault-call:4 fault-nth:2): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:24 executing program 3 (fault-call:3 fault-nth:2): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5450, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 283.013456] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 283.020725] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 [ 283.048228] FAULT_INJECTION: forcing a failure. [ 283.048228] name failslab, interval 1, probability 0, space 0, times 0 [ 283.086980] FAULT_INJECTION: forcing a failure. [ 283.086980] name failslab, interval 1, probability 0, space 0, times 0 [ 283.120919] CPU: 0 PID: 9547 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 16:14:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x300, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 283.128232] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.137594] Call Trace: [ 283.140199] dump_stack+0x244/0x39d [ 283.143862] ? dump_stack_print_info.cold.1+0x20/0x20 [ 283.149074] ? print_usage_bug+0xc0/0xc0 [ 283.153164] should_fail.cold.4+0xa/0x17 [ 283.157246] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 283.162395] ? __lock_acquire+0x62f/0x4c20 [ 283.166655] ? zap_class+0x640/0x640 [ 283.170390] ? find_held_lock+0x36/0x1c0 [ 283.174486] ? mark_held_locks+0x130/0x130 [ 283.178749] ? perf_trace_sched_process_exec+0x860/0x860 16:14:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5451, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 283.178770] ? print_usage_bug+0xc0/0xc0 [ 283.178792] __should_failslab+0x124/0x180 [ 283.178826] should_failslab+0x9/0x14 [ 283.178846] kmem_cache_alloc+0x2be/0x730 [ 283.188345] ? zap_class+0x640/0x640 [ 283.188360] ? print_usage_bug+0xc0/0xc0 [ 283.188376] ? mark_held_locks+0x130/0x130 [ 283.188404] __alloc_file+0xa8/0x470 [ 283.216257] ? file_free_rcu+0xd0/0xd0 [ 283.220158] ? find_held_lock+0x36/0x1c0 [ 283.224376] ? is_bpf_text_address+0xac/0x170 [ 283.228892] ? lock_downgrade+0x900/0x900 [ 283.233053] ? check_preemption_disabled+0x48/0x280 [ 283.238124] alloc_empty_file+0x72/0x170 [ 283.242203] path_openat+0x170/0x5150 [ 283.246048] ? rcu_softirq_qs+0x20/0x20 [ 283.250064] ? unwind_dump+0x190/0x190 [ 283.253980] ? zap_class+0x640/0x640 [ 283.254019] ? path_lookupat.isra.43+0xc00/0xc00 [ 283.254033] ? unwind_get_return_address+0x61/0xa0 [ 283.254050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 283.254069] ? expand_files.part.8+0x571/0x9a0 [ 283.262546] ? find_held_lock+0x36/0x1c0 [ 283.262572] ? __alloc_fd+0x347/0x6e0 [ 283.262590] ? lock_downgrade+0x900/0x900 [ 283.262605] ? getname+0x19/0x20 [ 283.262630] ? kasan_check_read+0x11/0x20 [ 283.296681] ? do_raw_spin_unlock+0xa7/0x330 [ 283.301115] ? do_raw_spin_trylock+0x270/0x270 [ 283.305712] ? __lock_is_held+0xb5/0x140 [ 283.309784] ? __check_object_size+0xb1/0x782 [ 283.314316] ? _raw_spin_unlock+0x2c/0x50 [ 283.318481] ? __alloc_fd+0x347/0x6e0 [ 283.322309] do_filp_open+0x255/0x380 [ 283.326121] ? may_open_dev+0x100/0x100 [ 283.330120] ? get_unused_fd_flags+0x122/0x1a0 [ 283.334717] ? __alloc_fd+0x6e0/0x6e0 [ 283.339049] do_sys_open+0x568/0x700 [ 283.342787] ? filp_open+0x80/0x80 [ 283.346356] ? trace_hardirqs_off_caller+0x310/0x310 [ 283.351487] __x64_sys_open+0x7e/0xc0 [ 283.355328] do_syscall_64+0x1b9/0x820 [ 283.359227] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 283.359247] ? syscall_return_slowpath+0x5e0/0x5e0 [ 283.359285] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.369638] ? trace_hardirqs_on_caller+0x310/0x310 [ 283.369656] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 283.369689] ? prepare_exit_to_usermode+0x291/0x3b0 [ 283.369710] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.394410] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.394438] RIP: 0033:0x4111a1 [ 283.394457] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 283.421769] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 283.421786] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 16:14:24 executing program 4 (fault-call:4 fault-nth:2): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xd, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 283.421795] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 283.421822] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 283.421832] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 283.421841] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 283.460748] CPU: 0 PID: 9552 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #128 [ 283.473505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.482869] Call Trace: [ 283.485475] dump_stack+0x244/0x39d 16:14:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 283.489119] ? dump_stack_print_info.cold.1+0x20/0x20 [ 283.494321] ? is_bpf_text_address+0xd3/0x170 [ 283.498864] should_fail.cold.4+0xa/0x17 [ 283.502962] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 283.508090] ? save_stack+0xa9/0xd0 [ 283.511733] ? save_stack+0x43/0xd0 [ 283.515374] ? kasan_kmalloc+0xc7/0xe0 [ 283.519276] ? kasan_slab_alloc+0x12/0x20 [ 283.523438] ? kmem_cache_alloc+0x12e/0x730 [ 283.527770] ? __alloc_file+0xa8/0x470 [ 283.527816] ? alloc_empty_file+0x72/0x170 [ 283.527854] ? find_held_lock+0x36/0x1c0 [ 283.527891] ? perf_trace_sched_process_exec+0x860/0x860 [ 283.527928] ? check_preemption_disabled+0x48/0x280 [ 283.545544] __should_failslab+0x124/0x180 [ 283.545564] should_failslab+0x9/0x14 [ 283.545577] kmem_cache_alloc+0x2be/0x730 [ 283.545657] ? rcu_read_lock_sched_held+0x14f/0x180 [ 283.567893] selinux_file_alloc_security+0xb4/0x190 [ 283.572965] security_file_alloc+0x4c/0xa0 [ 283.577217] __alloc_file+0x12a/0x470 [ 283.581028] ? file_free_rcu+0xd0/0xd0 [ 283.581048] ? find_held_lock+0x36/0x1c0 [ 283.581075] ? is_bpf_text_address+0xac/0x170 [ 283.581092] ? lock_downgrade+0x900/0x900 [ 283.581114] ? check_preemption_disabled+0x48/0x280 [ 283.602694] alloc_empty_file+0x72/0x170 [ 283.606788] path_openat+0x170/0x5150 [ 283.610631] ? rcu_softirq_qs+0x20/0x20 [ 283.614633] ? unwind_dump+0x190/0x190 [ 283.618545] ? zap_class+0x640/0x640 [ 283.622740] ? path_lookupat.isra.43+0xc00/0xc00 [ 283.627504] ? unwind_get_return_address+0x61/0xa0 [ 283.632446] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 283.637488] ? expand_files.part.8+0x571/0x9a0 [ 283.642090] ? find_held_lock+0x36/0x1c0 [ 283.646216] ? __alloc_fd+0x347/0x6e0 [ 283.650030] ? lock_downgrade+0x900/0x900 [ 283.654193] ? getname+0x19/0x20 [ 283.657580] ? kasan_check_read+0x11/0x20 [ 283.661738] ? do_raw_spin_unlock+0xa7/0x330 [ 283.666159] ? do_raw_spin_trylock+0x270/0x270 [ 283.667049] FAULT_INJECTION: forcing a failure. [ 283.667049] name failslab, interval 1, probability 0, space 0, times 0 [ 283.670749] ? __lock_is_held+0xb5/0x140 [ 283.670766] ? __check_object_size+0xb1/0x782 [ 283.670793] ? _raw_spin_unlock+0x2c/0x50 [ 283.670836] ? __alloc_fd+0x347/0x6e0 [ 283.670865] do_filp_open+0x255/0x380 [ 283.702414] ? may_open_dev+0x100/0x100 [ 283.706402] ? get_unused_fd_flags+0x122/0x1a0 [ 283.710990] ? __alloc_fd+0x6e0/0x6e0 [ 283.714858] do_sys_open+0x568/0x700 [ 283.718592] ? filp_open+0x80/0x80 [ 283.722170] ? trace_hardirqs_off_caller+0x310/0x310 [ 283.727284] __x64_sys_open+0x7e/0xc0 [ 283.731096] do_syscall_64+0x1b9/0x820 [ 283.734989] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 283.740362] ? syscall_return_slowpath+0x5e0/0x5e0 [ 283.745308] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.750158] ? trace_hardirqs_on_caller+0x310/0x310 [ 283.755388] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 283.760413] ? prepare_exit_to_usermode+0x291/0x3b0 [ 283.765439] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 283.770290] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 283.775499] RIP: 0033:0x4111a1 [ 283.778698] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 283.797706] RSP: 002b:00007f73c04087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 283.805420] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 283.812691] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f73c0408850 [ 283.819965] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 283.827238] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f73c04096d4 [ 283.834511] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 [ 283.841894] CPU: 1 PID: 9581 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 283.849183] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 283.858541] Call Trace: [ 283.861136] dump_stack+0x244/0x39d [ 283.864777] ? dump_stack_print_info.cold.1+0x20/0x20 [ 283.869987] ? print_usage_bug+0xc0/0xc0 [ 283.874074] should_fail.cold.4+0xa/0x17 [ 283.878158] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 283.883295] ? __lock_acquire+0x62f/0x4c20 [ 283.887540] ? zap_class+0x640/0x640 [ 283.891271] ? find_held_lock+0x36/0x1c0 [ 283.895366] ? mark_held_locks+0x130/0x130 [ 283.899608] ? perf_trace_sched_process_exec+0x860/0x860 [ 283.905067] ? print_usage_bug+0xc0/0xc0 [ 283.909178] __should_failslab+0x124/0x180 [ 283.913422] should_failslab+0x9/0x14 [ 283.917240] kmem_cache_alloc+0x2be/0x730 [ 283.921397] ? zap_class+0x640/0x640 [ 283.925116] ? print_usage_bug+0xc0/0xc0 [ 283.929184] ? mark_held_locks+0x130/0x130 [ 283.933460] __alloc_file+0xa8/0x470 [ 283.937196] ? file_free_rcu+0xd0/0xd0 [ 283.941125] ? find_held_lock+0x36/0x1c0 [ 283.945220] ? is_bpf_text_address+0xac/0x170 [ 283.949734] ? lock_downgrade+0x900/0x900 [ 283.949766] ? check_preemption_disabled+0x48/0x280 [ 283.949785] alloc_empty_file+0x72/0x170 [ 283.949831] path_openat+0x170/0x5150 [ 283.949851] ? rcu_softirq_qs+0x20/0x20 [ 283.959000] ? unwind_dump+0x190/0x190 [ 283.959026] ? zap_class+0x640/0x640 [ 283.959049] ? path_lookupat.isra.43+0xc00/0xc00 [ 283.959062] ? unwind_get_return_address+0x61/0xa0 [ 283.959080] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 283.959100] ? expand_files.part.8+0x571/0x9a0 [ 283.997778] ? find_held_lock+0x36/0x1c0 [ 284.001837] ? __alloc_fd+0x347/0x6e0 [ 284.005624] ? lock_downgrade+0x900/0x900 [ 284.009791] ? getname+0x19/0x20 [ 284.013155] ? kasan_check_read+0x11/0x20 [ 284.017321] ? do_raw_spin_unlock+0xa7/0x330 [ 284.021714] ? do_raw_spin_trylock+0x270/0x270 [ 284.026294] ? __lock_is_held+0xb5/0x140 [ 284.030364] ? __check_object_size+0xb1/0x782 [ 284.034849] ? _raw_spin_unlock+0x2c/0x50 [ 284.038995] ? __alloc_fd+0x347/0x6e0 [ 284.042813] do_filp_open+0x255/0x380 [ 284.046601] ? may_open_dev+0x100/0x100 [ 284.050569] ? get_unused_fd_flags+0x122/0x1a0 [ 284.055134] ? __alloc_fd+0x6e0/0x6e0 [ 284.058927] do_sys_open+0x568/0x700 [ 284.062627] ? filp_open+0x80/0x80 [ 284.066152] ? trace_hardirqs_off_caller+0x310/0x310 [ 284.071243] __x64_sys_open+0x7e/0xc0 [ 284.075031] do_syscall_64+0x1b9/0x820 [ 284.078903] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 284.084253] ? syscall_return_slowpath+0x5e0/0x5e0 [ 284.089167] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.093994] ? trace_hardirqs_on_caller+0x310/0x310 [ 284.098998] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 284.104000] ? prepare_exit_to_usermode+0x291/0x3b0 [ 284.109008] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.113838] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.119014] RIP: 0033:0x4111a1 [ 284.122192] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 16:14:25 executing program 5 (fault-call:4 fault-nth:3): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x80086601, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:25 executing program 3 (fault-call:3 fault-nth:3): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 284.141099] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 284.148793] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 284.156055] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 284.163307] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 284.170567] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 284.177829] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 16:14:25 executing program 4 (fault-call:4 fault-nth:3): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) [ 284.264727] FAULT_INJECTION: forcing a failure. [ 284.264727] name failslab, interval 1, probability 0, space 0, times 0 [ 284.277741] FAULT_INJECTION: forcing a failure. [ 284.277741] name failslab, interval 1, probability 0, space 0, times 0 [ 284.306558] CPU: 0 PID: 9603 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #128 [ 284.313865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.323230] Call Trace: [ 284.325862] dump_stack+0x244/0x39d [ 284.329525] ? dump_stack_print_info.cold.1+0x20/0x20 [ 284.334742] ? is_bpf_text_address+0xd3/0x170 [ 284.339266] should_fail.cold.4+0xa/0x17 [ 284.343345] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.347882] FAULT_INJECTION: forcing a failure. [ 284.347882] name failslab, interval 1, probability 0, space 0, times 0 [ 284.348473] ? save_stack+0xa9/0xd0 [ 284.363701] ? save_stack+0x43/0xd0 [ 284.367366] ? kasan_kmalloc+0xc7/0xe0 [ 284.371371] ? kasan_slab_alloc+0x12/0x20 [ 284.375539] ? kmem_cache_alloc+0x12e/0x730 [ 284.379896] ? __alloc_file+0xa8/0x470 [ 284.383830] ? alloc_empty_file+0x72/0x170 [ 284.388080] ? find_held_lock+0x36/0x1c0 [ 284.392190] ? perf_trace_sched_process_exec+0x860/0x860 [ 284.397652] ? check_preemption_disabled+0x48/0x280 [ 284.402705] __should_failslab+0x124/0x180 [ 284.406951] should_failslab+0x9/0x14 [ 284.410764] kmem_cache_alloc+0x2be/0x730 [ 284.414937] ? rcu_read_lock_sched_held+0x14f/0x180 [ 284.419992] selinux_file_alloc_security+0xb4/0x190 [ 284.425025] security_file_alloc+0x4c/0xa0 [ 284.429275] __alloc_file+0x12a/0x470 [ 284.433083] ? file_free_rcu+0xd0/0xd0 [ 284.436984] ? find_held_lock+0x36/0x1c0 [ 284.441064] ? is_bpf_text_address+0xac/0x170 [ 284.445569] ? lock_downgrade+0x900/0x900 [ 284.449727] ? check_preemption_disabled+0x48/0x280 [ 284.454755] alloc_empty_file+0x72/0x170 [ 284.458879] path_openat+0x170/0x5150 [ 284.462694] ? rcu_softirq_qs+0x20/0x20 [ 284.466675] ? unwind_dump+0x190/0x190 [ 284.470590] ? zap_class+0x640/0x640 [ 284.474330] ? path_lookupat.isra.43+0xc00/0xc00 [ 284.479106] ? unwind_get_return_address+0x61/0xa0 [ 284.484050] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 284.489071] ? expand_files.part.8+0x571/0x9a0 [ 284.493667] ? find_held_lock+0x36/0x1c0 [ 284.497744] ? __alloc_fd+0x347/0x6e0 [ 284.501560] ? lock_downgrade+0x900/0x900 [ 284.505717] ? getname+0x19/0x20 [ 284.509096] ? kasan_check_read+0x11/0x20 [ 284.513249] ? do_raw_spin_unlock+0xa7/0x330 [ 284.517663] ? do_raw_spin_trylock+0x270/0x270 [ 284.522254] ? __lock_is_held+0xb5/0x140 [ 284.526352] ? __check_object_size+0xb1/0x782 [ 284.530895] ? _raw_spin_unlock+0x2c/0x50 [ 284.535058] ? __alloc_fd+0x347/0x6e0 [ 284.538879] do_filp_open+0x255/0x380 [ 284.542689] ? may_open_dev+0x100/0x100 [ 284.546682] ? get_unused_fd_flags+0x122/0x1a0 [ 284.551278] ? __alloc_fd+0x6e0/0x6e0 [ 284.555106] do_sys_open+0x568/0x700 [ 284.558839] ? filp_open+0x80/0x80 [ 284.562391] ? trace_hardirqs_off_caller+0x310/0x310 [ 284.567538] __x64_sys_open+0x7e/0xc0 [ 284.571350] do_syscall_64+0x1b9/0x820 [ 284.575247] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 284.580620] ? syscall_return_slowpath+0x5e0/0x5e0 [ 284.585554] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.590425] ? trace_hardirqs_on_caller+0x310/0x310 [ 284.595448] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 284.600505] ? prepare_exit_to_usermode+0x291/0x3b0 [ 284.605625] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.610505] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.615699] RIP: 0033:0x4111a1 [ 284.618897] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 284.638309] RSP: 002b:00007f73c04087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 284.646039] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 284.653315] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f73c0408850 [ 284.660587] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 284.667872] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f73c04096d4 [ 284.675140] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 [ 284.682430] CPU: 1 PID: 9606 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 284.689728] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 284.689734] Call Trace: [ 284.689754] dump_stack+0x244/0x39d [ 284.689774] ? dump_stack_print_info.cold.1+0x20/0x20 [ 284.689794] ? is_bpf_text_address+0xd3/0x170 [ 284.715078] should_fail.cold.4+0xa/0x17 [ 284.719159] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 284.724308] ? save_stack+0xa9/0xd0 [ 284.727968] ? save_stack+0x43/0xd0 [ 284.731608] ? kasan_kmalloc+0xc7/0xe0 [ 284.735500] ? kasan_slab_alloc+0x12/0x20 [ 284.739654] ? kmem_cache_alloc+0x12e/0x730 [ 284.739670] ? __alloc_file+0xa8/0x470 [ 284.739684] ? alloc_empty_file+0x72/0x170 [ 284.739705] ? find_held_lock+0x36/0x1c0 [ 284.739741] ? perf_trace_sched_process_exec+0x860/0x860 [ 284.756642] ? check_preemption_disabled+0x48/0x280 [ 284.756668] __should_failslab+0x124/0x180 [ 284.756687] should_failslab+0x9/0x14 [ 284.756705] kmem_cache_alloc+0x2be/0x730 [ 284.775184] ? rcu_read_lock_sched_held+0x14f/0x180 [ 284.784359] selinux_file_alloc_security+0xb4/0x190 [ 284.789382] security_file_alloc+0x4c/0xa0 [ 284.789400] __alloc_file+0x12a/0x470 [ 284.789415] ? file_free_rcu+0xd0/0xd0 [ 284.789446] ? find_held_lock+0x36/0x1c0 16:14:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5460, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xc, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 284.789488] ? is_bpf_text_address+0xac/0x170 [ 284.809943] ? lock_downgrade+0x900/0x900 [ 284.814103] ? check_preemption_disabled+0x48/0x280 [ 284.819140] alloc_empty_file+0x72/0x170 [ 284.823216] path_openat+0x170/0x5150 [ 284.827042] ? rcu_softirq_qs+0x20/0x20 [ 284.831020] ? unwind_dump+0x190/0x190 [ 284.834924] ? zap_class+0x640/0x640 [ 284.838658] ? path_lookupat.isra.43+0xc00/0xc00 [ 284.843439] ? unwind_get_return_address+0x61/0xa0 [ 284.848383] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 284.853412] ? expand_files.part.8+0x571/0x9a0 [ 284.858010] ? find_held_lock+0x36/0x1c0 [ 284.862087] ? __alloc_fd+0x347/0x6e0 [ 284.865903] ? lock_downgrade+0x900/0x900 [ 284.870058] ? getname+0x19/0x20 [ 284.873470] ? kasan_check_read+0x11/0x20 [ 284.877636] ? do_raw_spin_unlock+0xa7/0x330 [ 284.882056] ? do_raw_spin_trylock+0x270/0x270 [ 284.886646] ? __lock_is_held+0xb5/0x140 [ 284.890715] ? __check_object_size+0xb1/0x782 [ 284.895234] ? _raw_spin_unlock+0x2c/0x50 [ 284.899405] ? __alloc_fd+0x347/0x6e0 [ 284.903228] do_filp_open+0x255/0x380 [ 284.907040] ? may_open_dev+0x100/0x100 [ 284.911038] ? get_unused_fd_flags+0x122/0x1a0 [ 284.915641] ? __alloc_fd+0x6e0/0x6e0 [ 284.919460] do_sys_open+0x568/0x700 [ 284.923183] ? filp_open+0x80/0x80 [ 284.926732] ? trace_hardirqs_off_caller+0x310/0x310 [ 284.931848] __x64_sys_open+0x7e/0xc0 [ 284.935683] do_syscall_64+0x1b9/0x820 [ 284.939581] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 284.944952] ? syscall_return_slowpath+0x5e0/0x5e0 [ 284.949900] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.954760] ? trace_hardirqs_on_caller+0x310/0x310 [ 284.959783] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 284.964837] ? prepare_exit_to_usermode+0x291/0x3b0 [ 284.969868] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 284.974742] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 284.979951] RIP: 0033:0x4111a1 [ 284.983153] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 285.002056] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 285.009766] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 285.017239] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 285.024508] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 285.031782] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 285.039062] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 285.046361] CPU: 0 PID: 9597 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 285.053660] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.063013] Call Trace: [ 285.065614] dump_stack+0x244/0x39d [ 285.069259] ? dump_stack_print_info.cold.1+0x20/0x20 [ 285.074469] ? is_bpf_text_address+0xd3/0x170 [ 285.078978] should_fail.cold.4+0xa/0x17 [ 285.083055] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 285.088181] ? save_stack+0xa9/0xd0 [ 285.091843] ? save_stack+0x43/0xd0 [ 285.095493] ? kasan_kmalloc+0xc7/0xe0 [ 285.099422] ? kasan_slab_alloc+0x12/0x20 [ 285.103611] ? kmem_cache_alloc+0x12e/0x730 [ 285.107944] ? __alloc_file+0xa8/0x470 [ 285.111849] ? alloc_empty_file+0x72/0x170 [ 285.116104] ? find_held_lock+0x36/0x1c0 [ 285.120219] ? perf_trace_sched_process_exec+0x860/0x860 [ 285.125688] ? check_preemption_disabled+0x48/0x280 [ 285.130726] __should_failslab+0x124/0x180 [ 285.134973] should_failslab+0x9/0x14 [ 285.138785] kmem_cache_alloc+0x2be/0x730 [ 285.142983] ? rcu_read_lock_sched_held+0x14f/0x180 [ 285.148034] selinux_file_alloc_security+0xb4/0x190 [ 285.153068] security_file_alloc+0x4c/0xa0 [ 285.157321] __alloc_file+0x12a/0x470 [ 285.161139] ? file_free_rcu+0xd0/0xd0 [ 285.165046] ? find_held_lock+0x36/0x1c0 [ 285.169145] ? is_bpf_text_address+0xac/0x170 [ 285.173637] FAULT_INJECTION: forcing a failure. [ 285.173637] name failslab, interval 1, probability 0, space 0, times 0 [ 285.184849] ? lock_downgrade+0x900/0x900 [ 285.189007] ? check_preemption_disabled+0x48/0x280 [ 285.194035] alloc_empty_file+0x72/0x170 [ 285.198114] path_openat+0x170/0x5150 [ 285.201933] ? rcu_softirq_qs+0x20/0x20 [ 285.205914] ? unwind_dump+0x190/0x190 [ 285.209832] ? zap_class+0x640/0x640 [ 285.213555] ? path_lookupat.isra.43+0xc00/0xc00 [ 285.218317] ? unwind_get_return_address+0x61/0xa0 [ 285.223261] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 285.228288] ? expand_files.part.8+0x571/0x9a0 [ 285.232894] ? find_held_lock+0x36/0x1c0 [ 285.236977] ? __alloc_fd+0x347/0x6e0 [ 285.240788] ? lock_downgrade+0x900/0x900 [ 285.244970] ? getname+0x19/0x20 [ 285.248347] ? kasan_check_read+0x11/0x20 [ 285.252500] ? do_raw_spin_unlock+0xa7/0x330 [ 285.256913] ? do_raw_spin_trylock+0x270/0x270 [ 285.261515] ? __lock_is_held+0xb5/0x140 [ 285.265583] ? __check_object_size+0xb1/0x782 [ 285.270097] ? _raw_spin_unlock+0x2c/0x50 [ 285.274249] ? __alloc_fd+0x347/0x6e0 [ 285.278089] do_filp_open+0x255/0x380 [ 285.281898] ? may_open_dev+0x100/0x100 [ 285.285896] ? get_unused_fd_flags+0x122/0x1a0 [ 285.290499] ? __alloc_fd+0x6e0/0x6e0 [ 285.294331] do_sys_open+0x568/0x700 [ 285.298069] ? filp_open+0x80/0x80 [ 285.301622] ? trace_hardirqs_off_caller+0x310/0x310 [ 285.306736] __x64_sys_open+0x7e/0xc0 [ 285.310545] do_syscall_64+0x1b9/0x820 [ 285.314450] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 285.319832] ? syscall_return_slowpath+0x5e0/0x5e0 [ 285.324776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.329640] ? trace_hardirqs_on_caller+0x310/0x310 [ 285.334662] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 285.339689] ? prepare_exit_to_usermode+0x291/0x3b0 [ 285.344715] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.349570] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.354766] RIP: 0033:0x4111a1 [ 285.357972] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 285.376872] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 285.384582] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 285.391856] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 285.399141] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 16:14:26 executing program 4 (fault-call:4 fault-nth:4): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='//ev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 285.406413] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 285.413681] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 [ 285.420976] CPU: 1 PID: 9624 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 285.428261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 285.428267] Call Trace: [ 285.428284] dump_stack+0x244/0x39d [ 285.428304] ? dump_stack_print_info.cold.1+0x20/0x20 [ 285.428327] ? __lock_acquire+0x62f/0x4c20 [ 285.453308] ? _raw_spin_unlock_irqrestore+0x82/0xd0 [ 285.453343] should_fail.cold.4+0xa/0x17 [ 285.453361] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 285.462507] ? mark_held_locks+0x130/0x130 [ 285.462553] ? print_usage_bug+0xc0/0xc0 [ 285.462575] ? lock_acquire+0x1ed/0x520 [ 285.471960] ? snd_lookup_minor_data+0x41/0x160 [ 285.471984] ? find_held_lock+0x36/0x1c0 [ 285.480033] ? perf_trace_sched_process_exec+0x860/0x860 [ 285.480067] ? zap_class+0x640/0x640 [ 285.488785] __should_failslab+0x124/0x180 [ 285.488814] should_failslab+0x9/0x14 [ 285.488831] kmem_cache_alloc_trace+0x2d7/0x750 [ 285.488849] ? snd_lookup_minor_data+0xbe/0x160 [ 285.488866] ? lock_downgrade+0x900/0x900 [ 285.488937] snd_card_file_add+0xbb/0x460 [ 285.498049] ? lock_downgrade+0x900/0x900 [ 285.506079] ? snd_component_add+0x180/0x180 [ 285.515405] ? rcu_softirq_qs+0x20/0x20 [ 285.515421] ? zap_class+0x640/0x640 [ 285.515457] ? kasan_check_write+0x14/0x20 [ 285.515476] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 285.523792] snd_pcm_open+0xd0/0x940 [ 285.523829] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 285.532388] ? snd_pcm_open_substream+0x400/0x400 [ 285.532438] ? m_show+0x5d0/0x5d0 [ 285.532457] ? chrdev_open+0xde/0x710 [ 285.540135] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 285.540151] ? refcount_inc_checked+0x29/0x70 [ 285.540170] ? snd_pcm_capture_open+0xe0/0xe0 [ 285.553044] ? snd_pcm_capture_open+0xe0/0xe0 [ 285.563361] snd_pcm_playback_open+0x87/0xe0 [ 285.563379] snd_open+0x21a/0x430 [ 285.563399] ? snd_request_card+0x80/0x80 [ 285.601653] chrdev_open+0x25a/0x710 [ 285.605398] ? cdev_put.part.0+0x50/0x50 [ 285.609480] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.615047] ? errseq_sample+0xe5/0x130 [ 285.619040] ? _copy_to_user+0x110/0x110 [ 285.623127] do_dentry_open+0x499/0x1250 [ 285.627257] ? selinux_capable+0x40/0x40 [ 285.631345] ? cdev_put.part.0+0x50/0x50 [ 285.635425] ? chown_common+0x730/0x730 [ 285.639417] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 285.644968] ? security_inode_permission+0xd2/0x100 [ 285.650000] ? inode_permission+0xb2/0x560 [ 285.654254] vfs_open+0xa0/0xd0 [ 285.657548] path_openat+0x12bc/0x5150 [ 285.661449] ? rcu_softirq_qs+0x20/0x20 [ 285.665464] ? unwind_dump+0x190/0x190 [ 285.669390] ? path_lookupat.isra.43+0xc00/0xc00 [ 285.674176] ? unwind_get_return_address+0x61/0xa0 [ 285.679123] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 285.684163] ? expand_files.part.8+0x571/0x9a0 [ 285.688775] ? find_held_lock+0x36/0x1c0 [ 285.692862] ? __alloc_fd+0x347/0x6e0 [ 285.696677] ? lock_downgrade+0x900/0x900 [ 285.700840] ? getname+0x19/0x20 [ 285.704223] ? kasan_check_read+0x11/0x20 [ 285.708379] ? do_raw_spin_unlock+0xa7/0x330 16:14:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:26 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/.ev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0205647, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 285.708394] ? do_raw_spin_trylock+0x270/0x270 [ 285.708409] ? __lock_is_held+0xb5/0x140 [ 285.708424] ? __check_object_size+0xb1/0x782 [ 285.708451] ? _raw_spin_unlock+0x2c/0x50 [ 285.717450] ? __alloc_fd+0x347/0x6e0 [ 285.733969] do_filp_open+0x255/0x380 [ 285.737796] ? may_open_dev+0x100/0x100 [ 285.741828] ? get_unused_fd_flags+0x122/0x1a0 [ 285.746436] ? __alloc_fd+0x6e0/0x6e0 [ 285.750273] do_sys_open+0x568/0x700 [ 285.754524] ? filp_open+0x80/0x80 [ 285.758082] ? trace_hardirqs_off_caller+0x310/0x310 [ 285.763200] __x64_sys_open+0x7e/0xc0 [ 285.767033] do_syscall_64+0x1b9/0x820 [ 285.771018] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 285.776394] ? syscall_return_slowpath+0x5e0/0x5e0 [ 285.776409] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.776426] ? trace_hardirqs_on_caller+0x310/0x310 [ 285.776442] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 285.776461] ? prepare_exit_to_usermode+0x291/0x3b0 [ 285.786226] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 285.786249] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 285.786261] RIP: 0033:0x4111a1 [ 285.786279] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 285.833403] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 285.841131] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 285.848408] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 285.855686] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 16:14:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/.ev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 285.862965] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 285.870241] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 16:14:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 4 (fault-call:4 fault-nth:5): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5421, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='//ev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0xd, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 286.123292] FAULT_INJECTION: forcing a failure. [ 286.123292] name failslab, interval 1, probability 0, space 0, times 0 [ 286.167774] CPU: 1 PID: 9672 Comm: syz-executor4 Not tainted 4.20.0-rc3+ #128 [ 286.175102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 286.184456] Call Trace: [ 286.187056] dump_stack+0x244/0x39d [ 286.190698] ? dump_stack_print_info.cold.1+0x20/0x20 [ 286.195897] ? zap_class+0x640/0x640 [ 286.199624] should_fail.cold.4+0xa/0x17 [ 286.203694] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 286.208811] ? find_held_lock+0x36/0x1c0 [ 286.212887] ? zap_class+0x640/0x640 [ 286.216633] ? lock_downgrade+0x900/0x900 [ 286.220857] ? find_held_lock+0x36/0x1c0 [ 286.224957] ? __lock_is_held+0xb5/0x140 [ 286.229037] ? perf_trace_sched_process_exec+0x860/0x860 [ 286.234493] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.240038] ? snd_pcm_attach_substream+0x78c/0xc00 [ 286.245070] __should_failslab+0x124/0x180 [ 286.249317] should_failslab+0x9/0x14 [ 286.253155] kmem_cache_alloc_trace+0x2d7/0x750 [ 286.257842] snd_pcm_open+0x3a2/0x940 [ 286.261657] ? snd_pcm_open_substream+0x400/0x400 [ 286.266498] ? m_show+0x5d0/0x5d0 [ 286.270032] ? wake_up_q+0x100/0x100 [ 286.273760] ? snd_pcm_capture_open+0xe0/0xe0 [ 286.278263] ? snd_pcm_capture_open+0xe0/0xe0 [ 286.282762] snd_pcm_playback_open+0x87/0xe0 [ 286.287191] snd_open+0x21a/0x430 [ 286.290655] ? snd_request_card+0x80/0x80 [ 286.294810] chrdev_open+0x25a/0x710 [ 286.298530] ? cdev_put.part.0+0x50/0x50 [ 286.302826] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.308371] ? errseq_sample+0xe5/0x130 [ 286.312350] ? _copy_to_user+0x110/0x110 [ 286.316423] do_dentry_open+0x499/0x1250 [ 286.320490] ? selinux_capable+0x40/0x40 [ 286.324551] ? cdev_put.part.0+0x50/0x50 [ 286.328616] ? chown_common+0x730/0x730 [ 286.332597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 286.338150] ? security_inode_permission+0xd2/0x100 [ 286.343191] ? inode_permission+0xb2/0x560 [ 286.347437] vfs_open+0xa0/0xd0 [ 286.350738] path_openat+0x12bc/0x5150 [ 286.354628] ? rcu_softirq_qs+0x20/0x20 [ 286.358606] ? unwind_dump+0x190/0x190 [ 286.362514] ? path_lookupat.isra.43+0xc00/0xc00 [ 286.367281] ? unwind_get_return_address+0x61/0xa0 [ 286.372217] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 286.377232] ? expand_files.part.8+0x571/0x9a0 [ 286.381845] ? find_held_lock+0x36/0x1c0 [ 286.385917] ? __alloc_fd+0x347/0x6e0 [ 286.389723] ? lock_downgrade+0x900/0x900 [ 286.393902] ? getname+0x19/0x20 [ 286.397279] ? kasan_check_read+0x11/0x20 [ 286.401427] ? do_raw_spin_unlock+0xa7/0x330 [ 286.405838] ? do_raw_spin_trylock+0x270/0x270 [ 286.410423] ? __lock_is_held+0xb5/0x140 [ 286.414498] ? __check_object_size+0xb1/0x782 [ 286.419013] ? _raw_spin_unlock+0x2c/0x50 [ 286.423157] ? __alloc_fd+0x347/0x6e0 [ 286.427022] do_filp_open+0x255/0x380 [ 286.430833] ? may_open_dev+0x100/0x100 [ 286.434830] ? get_unused_fd_flags+0x122/0x1a0 [ 286.439416] ? __alloc_fd+0x6e0/0x6e0 [ 286.443224] do_sys_open+0x568/0x700 [ 286.446964] ? filp_open+0x80/0x80 [ 286.450510] ? trace_hardirqs_off_caller+0x310/0x310 [ 286.455628] __x64_sys_open+0x7e/0xc0 [ 286.459434] do_syscall_64+0x1b9/0x820 [ 286.463326] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 286.468725] ? syscall_return_slowpath+0x5e0/0x5e0 [ 286.473665] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.478511] ? trace_hardirqs_on_caller+0x310/0x310 [ 286.483526] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 286.488546] ? prepare_exit_to_usermode+0x291/0x3b0 [ 286.493567] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 286.498431] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 286.503619] RIP: 0033:0x4111a1 [ 286.506824] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 286.525722] RSP: 002b:00007fd3920c27a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 286.533429] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 286.540715] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007fd3920c2850 [ 286.548004] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 286.555273] R10: 0000000000000013 R11: 0000000000000293 R12: 00007fd3920c36d4 [ 286.562539] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000005 16:14:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff00000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev//nd/pcmC#D#p\x00', 0x0, 0x405) 16:14:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x541b, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/.nd/pcmC#D#p\x00', 0x0, 0x405) 16:14:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 4 (fault-call:4 fault-nth:6): ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev//nd/pcmC#D#p\x00', 0x0, 0x405) 16:14:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x6, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:27 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/.nd/pcmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn//pcmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x5, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x1000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn//pcmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/.ev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn./pcmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x300, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn./pcmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x500000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='//ev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/.cmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd//cmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd//cmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100004, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x600000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/.nd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/.cmC#D#p\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#.\x00', 0x0, 0x405) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev//nd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x100000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#.\x00', 0x0, 0x405) 16:14:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:28 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn./pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:28 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#/\x00', 0x0, 0x405) 16:14:29 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfdfdffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#/\x00', 0x0, 0x405) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfffffdfd, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237002", 0x0, 0x405) 16:14:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370f6", 0x0, 0x405) 16:14:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn//pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x400100000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd//cmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfdfdffff00000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/.cmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xe7ffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#.\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:29 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffffffffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:29 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x500, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:29 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#/\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x3, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370f6", 0x0, 0x405) 16:14:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237003", 0x0, 0x405) 16:14:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xe7ffffffffffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237004", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffffffffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xffffffffffffffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x400100000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff00000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:30 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x1000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:30 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370ff", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfdfd, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237002", 0x0, 0x405) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370ff", 0x0, 0x405) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x600, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237003", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:31 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x4001000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237004", 0x0, 0x405) 16:14:31 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xe7ff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:31 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:31 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370ff", 0x0, 0x405) 16:14:31 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffffffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237003", 0x0, 0x405) 16:14:32 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x700, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237002", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237005", 0x0, 0x405) 16:14:32 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x400100000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237004", 0x0, 0x405) 16:14:32 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237005", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xffffffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:32 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x5000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x1000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:32 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:32 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:32 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#pk', 0x0, 0x405) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfffffffffffffdfd, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#pk', 0x0, 0x405) 16:14:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x100004, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x4001000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2000000, 0x405) 16:14:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x300000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100004, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#pk', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300, 0x405) 16:14:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x300, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4, 0x405) 16:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:33 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0xfdfdffffffffffff, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2, 0x405) 16:14:33 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00000000, 0x405) 16:14:33 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x4001000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:33 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370f6", 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:33 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300000000000000, 0x405) 16:14:33 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x700000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x400000000000000, 0x405) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x100000000000000, 0x405) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffffffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x3000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xfffffff6, 0x405) 16:14:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000000000, 0x405) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x6000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x5, 0x405) 16:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3000000, 0x405) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x200000000000000, 0x405) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x7000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x405) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff00000000, 0x405) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x5, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:34 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x100000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:34 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xfffffff6, 0x405) 16:14:34 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2000000, 0x405) 16:14:35 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x6, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00, 0x405) 16:14:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00000000, 0x405) 16:14:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x500000000000000, 0x405) 16:14:35 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff00000000, 0x405) 16:14:35 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x7, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x400000000000000, 0x405) 16:14:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000000, 0x405) 16:14:35 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x8, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b, 0x405) 16:14:35 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0xa, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000000000, 0x405) 16:14:35 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x500, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00, 0x405) 16:14:35 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0xb, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x5000000, 0x405) 16:14:35 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:35 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:35 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3, 0x405) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0xc, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000, 0x405) 16:14:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x200000000000000, 0x405) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff, 0x405) 16:14:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0xd, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000, 0x405) 16:14:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x405) 16:14:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff00000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x3, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000000, 0x405) 16:14:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x400000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4, 0x405) 16:14:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x4, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff, 0x405) 16:14:36 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/enforce\x00', 0x200000, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vsock\x00', 0x0, 0x0) pipe(&(0x7f0000000180)) write$input_event(r0, 0x0, 0xffffffffffffff5d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0xf, &(0x7f0000000200)={0x0, @in6={{0xa, 0x4e22, 0x4, @dev={0xfe, 0x80, [], 0xc}, 0x5}}, 0x1f, 0x4, 0x3, 0x13, 0x9}, &(0x7f00000002c0)=0x98) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f0000000300)={r3, @in={{0x2, 0x4e24, @local}}, 0x2, 0x8}, 0x90) ioctl$VIDIOC_QUERY_DV_TIMINGS(r1, 0x80845663, &(0x7f0000000000)) 16:14:36 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3, 0x405) 16:14:36 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:36 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x200000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:36 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x2, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2, 0x405) 16:14:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) mmap$xdp(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0xa, 0x30, r1, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x5000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x9, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:37 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3000000, 0x405) 16:14:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x400100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0xd0240, 0x0) fcntl$setlease(r1, 0x400, 0x830206edc4e2a241) ioctl$VIDIOC_S_HW_FREQ_SEEK(r1, 0x40305652, &(0x7f0000000080)={0x1, 0x3, 0x7, 0x2, 0xaa, 0xffff, 0x8}) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0x80000000}, 0x1) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300, 0x405) 16:14:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffffffffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x500, 0x405) 16:14:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet(0x1e, 0x1, 0x0, &(0x7f0000000d40)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xfffffff6, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300000000000000, 0x405) 16:14:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$SNDRV_CTL_IOCTL_TLV_READ(r0, 0xc008551a, &(0x7f0000000000)={0x4, 0x24, [0x1, 0x5, 0x7, 0xff, 0x3, 0x9e43, 0x80, 0x6, 0x9]}) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:37 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x100000000000000, 0x405) 16:14:37 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x5, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:37 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:37 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x200, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000040), 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b, 0x405) 16:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x3, 0x141000) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0xfe5, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) flock(r2, 0x8) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:38 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff00000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) sendmsg$unix(r1, &(0x7f00000016c0)={&(0x7f0000000000)=@abs={0x0, 0x0, 0x4e21}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000080)="03f2e5e53a87cd451fa79eb3ccba1795b6d6dd5efb41da8b25657654cb3b9cc35903e08f99ca116f69c0be238b1ecb4bb8e8fafaa695080233e47c18023bc569425b07d4b2be3e59aea87b5f8029705b3118febe044d9cd2e766bcacb6fb1dbcb8dfd9929f0183f25474f36f5801d7f823bcd51afa0e5855e8edb0fcf2a3987c69c06721f815c22966d143e87ba08096a2f1c309a5c40304cc0643cf7f044a60873b5d0fe76bb7a1f543bb87cb76f78ff2", 0xb1}, {&(0x7f0000000200)="d662812169418516618213d2dc2401810ade001b48417652bcc8cd360aa9058401d3d6051dc9fd00850148e1f326e65b9b335b571dfdd12e6bd8263a196ca5a60331f599bd170d80e31652245dcb77e0d3df", 0x52}, {&(0x7f0000000280)="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", 0x1000}, {&(0x7f0000001280)="cff070d84719577f6fcc27feb8719162fda325d4741beb1c0295a58cfdaaf29448ae8dabb401392ad0ebcbb1ba62813057e21d056c1f771c941f084340304a00111848c8907f4ad0467699849b048b63aeda689110f63f7071fd46e4fe6474cbf1e12968767dca0cce75ab941a3dcd1f6c8a7208e12582cc83f4446f60706368790aa2961fa63a872289cbd0e1e369e6719c32405e7ffd828942aa5be95d5657b97c97e1cc4296c543206a", 0xab}, {&(0x7f0000001340)="a48cca67df8d1e4022786158a8bac55fa8296213fc92fc0bb3598e2ac671feef5e57bcdaaab409b115a2b0f4f1e81b6ff6e853ef8784ef0c290226d1d62badab318a2fcedf1a811fe9e89392702246b4", 0x50}, {&(0x7f0000000180)="2ee0891498ca88bc8cfed1", 0xb}, {&(0x7f00000013c0)="9a0a38aafc62d728aba79b4da2d0a31cd9806ad633dbc1ddeea6c134b0680ae51867d9fa17c4f9e3c9a85908cb9430ee32ce37eeba83782a45c83ef44d89b2a2b1a005aa3a7d6ec317570cc106f8f3", 0x4f}, {&(0x7f0000001440)="f88140e899", 0x5}, {&(0x7f0000001480)="8446e10d84854c4bdbf660087bdaba08afe71490acb91c7f230857669a4bf4d2bdd471304bdbffa1abe1a4cc4b736675fe1819967064139a640d8913a2d5a8aef17dd76612c2b4832a29b31c0b40fda9632be28d94c4acdcd336f4325cde85575c762ebe5f2843e9348ee306472d325156ca6677dab6b29e4060acb8826121f5599e21fd3c23c6de8a720095c68d9df7468d12351d9134f6d45b069d0a93c21f589bcfa1d76f93bf0d1aa501d187d53120e28c20273327cb39d8c186580dcf1dd5be0492a9ed54206bea4f6bd20871c78fc0839e380b5275fc1aad48993947760b2e790fa75a1d2ee0025b10e3638a2673", 0xf1}], 0x9, &(0x7f0000001640)=[@rights={0x30, 0x1, 0x1, [r1, r2, r0, r2, r2, r2, r2]}, @rights={0x20, 0x1, 0x1, [r0, r2, r2]}], 0x50, 0x4000800}, 0x20004000) 16:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$KVM_IRQ_LINE_STATUS(r1, 0xc008ae67, &(0x7f0000000040)={0x5, 0xffffffffffff8001}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x4, 0x10000) syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x5, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(r1, 0xc040564a, &(0x7f00000000c0)={0x2, 0x7, 0x1009, 0xf0a065f, 0x100000000, 0x40, 0x2}) setsockopt$inet6_MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000000)={{0xa, 0x9, 0x8, @loopback, 0xe24e}, {0xa, 0x4e20, 0x7f, @mcast1, 0x9}, 0x3, [0x7, 0x40, 0x3ff, 0x6, 0xfffffffffffffffd, 0x1, 0x8, 0x2]}, 0x5c) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x300, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:38 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = open(&(0x7f0000000040)='./file0\x00', 0x2000, 0xac) write$input_event(r1, 0x0, 0xfffffffffffffe80) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$RNDGETENTCNT(r1, 0x80045200, &(0x7f0000000000)) 16:14:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:38 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfffffdfd, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$KVM_GET_PIT(r0, 0xc048ae65, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000040)=0x5, 0x23a) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet6_sctp(0xa, 0x1, 0x84, &(0x7f0000000000)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r2, 0xc038563c, &(0x7f00000000c0)={0x1, 0x2, {0x0, 0xfffffffffffffffa, 0x8, 0x2}}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:38 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x500000000000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:38 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:38 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x1ff, 0x2000) r2 = syz_genetlink_get_family_id$team(&(0x7f0000000140)='team\x00') getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000280)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in=@loopback}}, &(0x7f0000000380)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f00000003c0)={{{@in6, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}}}, &(0x7f00000004c0)=0xe8) sendmsg$TEAM_CMD_OPTIONS_GET(r1, &(0x7f00000006c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1042c01}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x154, r2, 0x200, 0x70bd26, 0x25dfdbfe, {}, [{{0x8, 0x1, r3}, {0x12c, 0x2, [{0x38, 0x1, @mcast_rejoin_interval={{0x24, 0x1, 'mcast_rejoin_interval\x00'}, {0x8}, {0x8, 0x4, 0x4}}}, {0x38, 0x1, @notify_peers_interval={{0x24, 0x1, 'notify_peers_interval\x00'}, {0x8}, {0x8, 0x4, 0x80000000}}}, {0x40, 0x1, @name={{0x24, 0x1, 'mode\x00'}, {0x8}, {0x10, 0x4, 'broadcast\x00'}}}, {0x40, 0x1, @lb_hash_stats={{{0x24, 0x1, 'lb_hash_stats\x00'}, {0x8}, {0x8, 0x4, 0x80}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24, 0x1, 'notify_peers_count\x00'}, {0x8}, {0x8, 0x4, 0x4}}}]}}, {{0x8, 0x1, r4}, {0x4}}]}, 0x154}, 0x1, 0x0, 0x0, 0x40000}, 0x20000054) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x400) 16:14:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140201, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f0000000000)) 16:14:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000000, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:39 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x8040) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000040)) syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:39 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) write$UHID_DESTROY(r1, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 4: openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x408000, 0x0) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000180)='/dev/snapshot\x00', 0x80, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x101000, 0x0) ioctl$EVIOCGABS2F(r1, 0x8018456f, &(0x7f00000000c0)=""/82) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_NOTIFY(r1, &(0x7f0000000240)={0xf, 0x8, 0xfa00, {r3, 0x17}}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2800, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:39 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x5fab51a2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:39 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:39 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x800) ioctl$EVIOCSMASK(r1, 0x40104593, &(0x7f00000000c0)={0x17, 0x55, &(0x7f0000000040)="73837375a935d4f1c001c7b052d9673ef79b08d9c9bf905d504f73f3af689c41788664a086940ae761404fc94a8fd8e75378902e625d4595ead36831171d556d6cbe4083c6fe2a4963b1498d8096edc6247472bf32"}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:39 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:39 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1fffffffe00, 0x5, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x0, 0x4000) write$9p(r1, &(0x7f0000000200)="d7e301c1272a8e8c0d9b1b0ca020be5a6988f1d97833533fa642b264a8fa1f4e0efd237922694d2e3097f9fca7434ed336bd1caef45b8c5c5a9461015eb2dce1761b9a410817076c29884a84293435e943b9fd26868730d2c995d52545db5191f5d1c1578deb0735a0a65ddee87c6ccb5e09bb32301e306222a663d3bcf0176230bb16964f70cab6a885a0e933cc75d0b0ef8bc005b80f7b5bb3a760f3a12576b6d04c9dbb2f7365b46be77bb09d40f9b164b38778c4a2830d9398d74c9d6a8c35b3850aea83421599cb7bc0a989eb44e2e6b259c48e7dc2a338e4dd8d81593227b09d2d82718c4948688e51", 0xec) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x40000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x111000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x400100000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 5: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x2, 0x23fc) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = shmget(0x1, 0x2000, 0x900, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000002200)=""/4096) r4 = socket(0x1e, 0x2, 0x0) ioctl(r4, 0x100000008912, &(0x7f0000000000)="153f6234488dd25d766070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5, &(0x7f0000ffb000/0x4000)=nil, 0x7) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x2c5) mmap(&(0x7f000020b000/0x2000)=nil, 0x2000, 0x1000008, 0x40010, r6, 0x1000) r9 = msgget(0x1, 0x0) r10 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x86000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r10, 0x8008ae9d, &(0x7f0000000380)=""/247) msgctl$IPC_RMID(r9, 0x0) r11 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80000, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) fcntl$getownex(r8, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000280)=0x9) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x4, 0x9, 0xffffffff, r12}) write$binfmt_script(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f666905dfaf3c3913750fc1ef8c70b68e0b6dbe418807e1044a9d87747d8e0ba85312a0187080fa4242515e54235359f3867010670020b7d34b273b0faf499d4208dbc3632c12345e2174489e0eb0da97ae86b32d11860888ea9e9ad25d8852f678a3ada658d3bf28cbd8fc6175bbf060228e4e3eb9065ec692effb7b672bb80ddd1619c83f03b70d9114336dad43d04a1203f6adcd062162be912a7650900ce0ff2d4f62af18bca0243b22e5727b5e0000000000000000"], 0xbb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:14:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$RNDCLEARPOOL(r1, 0x5206, &(0x7f0000000000)=0x7) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x400000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:40 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000180), &(0x7f0000000200)=0x8) r1 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x96, 0x40) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000080)=0x9, 0x4) r2 = syz_open_dev$radio(&(0x7f0000000000)='/dev/radio#\x00', 0x2, 0x2) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000002c0)={{0x5, 0x5, 0x1, 0x1000, '\x00', 0x7}, 0x2, 0x30, 0xcf1, r3, 0x7, 0x9, 'syz1\x00', &(0x7f0000000240)=['/dev/snd/controlC#\x00', '/dev/audio\x00', '/dev/radio#\x00', '\x00', '/dev/snd/pcmC#D#p\x00', '/dev/radio#\x00', '/dev/audio\x00'], 0x54, [], [0x5, 0x3f, 0x9, 0x3]}) ioctl$UI_SET_SNDBIT(r2, 0x4004556a, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:40 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) timerfd_settime(r2, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x77359400}}, &(0x7f0000000080)) socket$inet6(0xa, 0x6, 0x4) 16:14:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7ffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) dup3(r1, r0, 0x80000) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x400, 0x0) 16:14:40 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:40 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x4001000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x200000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x2100, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x1000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 4: r0 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000001240)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000001280)=0x4) r1 = syz_open_dev$adsp(&(0x7f0000001300)='/dev/adsp#\x00', 0x0, 0x100000000020001) syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x6, 0x0) dup2(r1, 0xffffffffffffff9c) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dsp\x00', 0x10900, 0x0) r2 = memfd_create(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, 0x0) ioctl$VIDIOC_G_OUTPUT(r2, 0x8004562e, &(0x7f0000000000)) r3 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000080)=0x8) write$binfmt_script(r3, &(0x7f0000000180)=ANY=[@ANYBLOB="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"], 0x109e) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 4: r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x200400, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x1f1) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) fsetxattr$security_smack_transmute(r0, &(0x7f0000000180)='security.SMACK64TRANSMUTE\x00', &(0x7f00000002c0)='TRUE', 0x4, 0x1) ioctl$TIOCLINUX5(r0, 0x541c, &(0x7f0000000300)={0x5, 0x47c0, 0xffffffffffffffff, 0x2, 0x3}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000040)={0xffffffffffffffff}, 0x0, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f0000000200)={0x16, 0x98, 0xfa00, {&(0x7f0000000000), 0x0, r1, 0x1c, 0x0, @in={0x2, 0x4e24}}}, 0xa0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x4}, 0x68) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = msgget$private(0x0, 0x200) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000040)=""/207) ioctl$DRM_IOCTL_CONTROL(r1, 0x40086414, &(0x7f0000000000)={0x2, 0x5}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x400100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x280000, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x800}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000080)={r3, 0xffffffffffffff00}, &(0x7f00000000c0)=0x8) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x300000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x40) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x403) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x10000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x1, 0x82000) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x3000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 4: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x80, 0x0) ioctl$KVM_GET_NESTED_STATE(r0, 0xc080aebe, &(0x7f0000000200)={0x0, 0x0, 0x2080}) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r1 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x1, &(0x7f00000000c0), 0x13f}}, 0x20) 16:14:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$FS_IOC_GETFSMAP(r0, 0xc0c0583b, &(0x7f0000001200)={0x0, 0x0, 0x0, 0x0, [], [{0x1, 0x9, 0x9, 0x5, 0x7ff, 0x6}, {0x1, 0x7e7b1f11, 0x80000000, 0xffff, 0x86ca, 0xac}]}) syz_mount_image$nfs(&(0x7f0000000000)='nfs\x00', &(0x7f0000000040)='./file0\x00', 0x1f, 0x1, &(0x7f0000000080)=[{&(0x7f0000000200)="c270f6993061a51d0737a38438354f66b705913a863c4757a22d4cbab6175bfcf39b1981f8c00c3c7a314bbd0eb9900b03dc6ff560bc941f399ae0f8f338ffdfc3cde2cdd88ee70deef9d8b0d4b5b8375b78fac7281f3474aebefdfea314e68bb87bbf06dd838fba420a1151bee10f2d7b39219ddf6943f39040f30c9b5704a7c10d1b3eb9edf21a3f4e84115890136637742a688103a944f122264a6c873fd3afdbf3ad73e44de924a715b9d398a459c473f15fa8f5c7842f6e2f83b6dcbacbacb3b1e99499fc797a33b026afa4caa66316a258e33dbc40d0bedf38de8bbbb206f5a540557c2c37da8656ee9b0eb458b2b898417e25411320b163b40727e628af01035c20463c644d16ea9d0de0d9225e4904008191a1f4e651c67b6b8baedf951962d6d07010af88b94ba22722d59c80ba9944cb5c7156c9fbc73884322e03cb36b699410dad9b0ef5e1c22657e73c19d643f2d4ba9332aa756e56c74c7676e3b7f5af9e0a1cc57918d59bc6b6d9ac84cad3d3736004da5d90eda8ade78ccb9051d3a973de87596c33684ce0b9e9ef6908787d57032e4f52c2276ad97d3d9c64c59d8ba2ef3bb9614b299e5b29a323de4d53e4b748a53c76955ea3c54157e5e2802918fd979881b6a7f4325c79f8e470f12cd1b51d6d7c19dec7bc4b4b26428b7cd602fb785b942ef7ce9c8267b5b7dd3434fafb5371e229d400d0dab62d864b8d927a181312a68a7d3a2b408581600eee39f49c44b41c03bbde4ab77376bbc28ad8ba2f204782f8a21e923ad3c38cf8bfd5e9f5572477e27800e6d30d5ee4feed47fe8317cbd0e017c4f783a508664897faad863267151d0fc14a15e415a9ac0f6f73537ad79a694efaa68b17b32e7b75f17bece562bef3c6d28bb222b2cd479d4bcc94809d7f0ba84efc623ef38fa70046336607fdc0f44c2b5c84e098adbd4bd5510b3e111d492b73fc1f92b498145e8cc6abd664e9775f4acdb342b55b9f9e5430674602e84688e61d85d46fd21f041d0982418b29c2aab38f896120b9f28b30e6bfa737accb9eef204d5eb15eb7b6e55806a4bc4cb754413a23c23a6592d0e1a7de483d958a3e8dd4687e0ff2fa3cec3b70df984114ba01f108fb502d13c0d8cd8d98be2f50b4e18def8119dad164e3bbf8eb601841d8dbfc1df585ca829d002b65228efffe38679cf48766109d962ec524c42aec8143cccc1e6acdb8674bf41bf3c296b42c08acce2bee0774f3b110f104f46ebdec2fca66323af64847de4bc2ebfc94ea783e68faae88be3288e1e1162806d6677bd3e1d22f9042bec55e9a884113a20cb6d60f52b36b1cb183003daa0b9e71bc93b7813a489608984f0a0e2ad0c79cdd024dfa11848cee3a267371c7916b20607834309404119f0023f3ad91e7099bf85c2bf69449735189c16b0887e9eef78a6ff308c99e8afb162354418747415e1d98e0f39d64c7e619b3e5b498f08385b32ae9e25315c064f2722355ead309614fe908ed5d6a00e0c01f40928debfb15d80d17702dd915c3a457a867de3354808e0f0f745d63d3ac62feb698fc7ed704b7d3fe084152220eb19e2f1147d9366bb569bc6f0d519fcadca7a13f905fa8df9a6f0a526341a2aac9ffcb6c40114c7767600ac20439f6c7ef081dc7411a1074776378243b070d6dbc20cfe0652ef4d6b77f3fca647737f68a56bf0b21baa829c01b78202536c915c9c1f3739024e339db0a8e5e0d51fcc4840d4185fa1032868fa4d5d9ac33365a35d7723f06482feb2c09c73092d2f8a0470069271399e5ca904488877b74e1200ed597bc14c6fb0b40b6e2ef275b52220f74b01aed5eab2bd67ce3aea6df192286b707161cdef26ccb3c11066727859284f6902dd82c5e3223f99d9877bf8bb9d34c4f26513522a7e176fd38bd8c8a737a5a3c006d83f0a137e3514a98209e393e33df5e7644bb6d8ff661d371c0621408ee8b6b822771787f6f6aad7808a1cdde9d7f6fcd281ed82f4e509842e55b7c7b2ee287642c7264b93f3b06dffabfc0498d08492d63a81072afca1419c36d1d0a534e95042a59e058fb4b0be9cf45f05ed54adbffe3515c55c8c7464b133d3d087bd2e4788593a0250ad5f4904848440c62580471f6a41dfecd0ccf8735f169e217b989670c1f966600ea9a5f2314b766a59bf268273cf1806654da3be69193a40e1342c8b337b79ef8381d37bd64ea721982dbeab4fb892e2376f43233cd5449f929cfa787ff52e5006ca50b78c785b577a42114e2c8568f4ef031e1ea11147b3e55d6103f2cad16d47fc7d64787a097cf9cc448afe20e3917d7efae5f06b7ed24e8784efaca6f9879d8b4e9312454872b44763f8b88c061885cc81879e962ec1f2f0d5ac83ef6e646be7e7157a9ffd42395c1bab9ac0074c8b3986ab3a621bf002504c8046860e371b80c673bd11fbc3a65966e3a950e4a156b585c889922970014da3aa8c3ebcb5f1b2b88eebd073dd4e712f6c4fdfa002fcdd92e860f384c2929991e816b1c8077f248d694a3ae89b1f71fb75be3d615a5ca4f1197199f0d26b1bcad1051fc0cf886791104fc5b549782a467abec12c22c57456f3482e8f8b49f7deb1d3b8a2d03fc2327698d032bbb382f18d6722b5bac30ff7703190e851f9eb8bafaac589b18d66ca6c30b1fea12fb699d0b4b6d63f9c3a723286a971547e98923f3dab88a1dc57dcec8828c6ef53a0456406696aba97f3fdb6ec3a84b18581ca39dbdacbafe21d388a333bcae3c4580437d6f1f6de37f7b0afbcb245a10230245aa5ae3e4c5134bb808ede5559e5e9c498471f75745442accc950d90d48a5e7bde0b2147db5c2e361fe5678bf176fe2035980f23a1cf75d11e36b39351f5b4c3e6829b6393c36acd3ed4759c5547357fdc691ddcc4b8c0c0b43b2ad02d846fb49103c3bd160b1b41e578778745801b19ffe6ca6c5d43fd28d4f4204d6277cfb2afa4c121d9721e88eb7788e4a51b81074903a39583ad2845919d2701ae544a03b376dd92b454690228cbb80b4211106e0f6eb2dbef0f212533756af2efd54c41dd4c3e9659b16fb658713ddb09823d43e1e7d09db0111f8b19c1ccb8597c5e18c55934c96184f8ab8a3f37920ef396dfe6bf44dfbab3002be99b8aefb031355c06f2a86f4edab55c3919c63f3f7d56cb227b894fbbbb4c1abbfc0da093e16ac9613f309712ff92d5cf11ed80551bee47245a0149dda7eda5c4a604397ef24caaa42506739f89a68b5bae33f5ccbe11505eb689d7fedd4a0607a0f0659ea593b5b6527754e8457f347dc626ee7676eb536de1e86513cb90e3db8791e7889323c5a63ea3705e000c7c14b567fd9be3972bf27f54d41ea714f6f9defc4b874ead692dfacbbb14b82a818fcc75c221104fcfb1e0d827ef69458283c2bc8a766ddbe1731f3f825456a03174f93ab47b1a1bb700ae78616bce1852fe7700b9150150ef279a9aa0cd82539613fa04887bec6ddb8ff81eef8c718c78ed1b17999bea7f467abc39065d217d6c6cab9a2c0f76db0610bdc8d7fb894ce7e2e29b1aadd81f85f8cdf43b1c139838a2d4b2ecf43426dedfdaa9fb2f06ed59b1f9a69f05d6e618230f15b13beae067d8f070e7fdd7068471a62bd4bb874a56481df3d5080cd26c05fce4d6292388da94d5f64a5b787a3bfcc5d7eba93af24bc98b670b68d4f2b95e9f29c3c13201a0c93303935e86b3696da552454fd3e11ab2c848c9f340a78dae9de2e897797453db6f6b5192bcce89d24bc78073d578eeccbaaca35690d4d0c385adfe330abb3b0afb5a020a8177dbd83d7b8cd6518f7525a546ad2c3accbb6bc1c051d38a56f3ca875bb5c4a61899e2db302e4de5c7f5334afbb2dcb5e021425d8ad343f583b534951669aaac587eb53d8828058e46a0e1c7ae79f15bb8a8525f5422895b3f955920bda49ceb2bf17dd96bb45c3b9eb20a6f9d1c69425cec3814940b8027b27788f99ba582acb6dcd777eed0643c16da0363d0312933230d771a056aaf60e383700e4d23425ec7f4d79f3c9091754e44c692869a3bc641db6b3d6ceaeb4c00b15da70bbc27572c27136fd9077baee7c656dd7c8285ab21579e6428e1cee66f4cc8e6be157804a0f6343865e1c5e18f8c04cbd4fa07367274dc59a0bfd5f309f6a4f3a9232a41e432b2bbfab1c9c3ee86b2ace2e2953e571e0a7bbdd99ce2dd943a9da2d280c366bf3ab0a5def8f88140c2c6c2e304720f3684ae8654d6787757b1b90d2cd31c75a2122a757a4c99880787f12f8cc7769ddb8de4cfdc8ea5cfbbaa2c8c19841d12b956cab0cff091be3e0c69e9d2a5fdca439c088a2946bfc1a2ac0ef808f8c72ddce45704207d0c90af82a083279001f33189108e4bf1e1a873759d8fefa7f43943cb4fe200e3fc48d6660b18fb0b51e4c0c2dbda48a439ade119898f8ade52a521b605389bf1d895c2baf43601930d7f5f36391104e25c16c0c6c7c56a598c2fa30dba38d479193ca75abcbbb6225a70a6f3291e9f154ebc2451fb16207271627f4aa43549eac83ed3721bff01f81d0b42c1ec8fbbf3cb74b7c9c630417958a7b4c35cb0fdad7dfd805c835796133851054d1da93d587d4c5cb03e2865afc30be1825c3f0a2a4f5734025e5c63bda7fd4927c028b874f7c482f2d2033a1e3f4266090971963e0e2af560e0c9b85450c88e8b172c944a478588b5681fbe88be87bd1edc26c80f0ea4f4eda7b1c4bed8f8602a6f2a4825f0b1c544a90a3dd3f880a86f013893ca38829a4b1417814b50ac8b931f627b6c2381a1f723afb5d6375352aa2e80367432eba850a6a5e8dd3b4edd365a10b8b3a4402ebc4699c8ae49ea46d725098540f9262a24a6f8ee9d8c99a6bd1324e8355c9cbcb597e00e14fa5f58462fb9a004539382b6e89541f6b44cddbca79f1085fb798c7a7dc8266924441ea2aae3fb6adb91cb853648c5ecaab04618ec4e8fe41ccac6671a98cfaab43e954db30f6f1ee7f9412885382f9c1237d83b230c04fd34460c37ab7176a5a1daaff51271e28c637e872fe5c4a878755d4ce1c6d30e790b92558303c35a7bcb1ff33f20f6158cdb88584f885b143097f51c5ba5210d40866656adfac484e1348b0a9aafd966d1ae0849c66435c1b471c40e9d2eedb73989f42cc6c72dab9e6e19f35653df531d1a619e0be0f645a3908aef6b2457c6e645e587b748af9ebffb0823243a8a9dc54443c2cf4f7e39ca917b63575560fb66f97c9bb7a496a0d2d6d054e6af1408d47e22f2b7ce82eb6ff9cb122420786dd9b244ad1c466373a49be602e2e53380e92bbe2480b08f5b33d8838a47c3bfc647819c68934a90a2521c4dbdf051b0b79920b4157322c0cb1a2b6b21be5c4214bddb0c5b4c4eb5aa90fe81828c707cf6cd2c07b81826bd7983a0e4ac9c74de75be012b384d50273df1202a10a9a2c4808c768bfee8ea99e692dcd06d10e86e5e92d928389667fdfad73c7977689aaf4b5c97ca68b4fa5e823cde8da2cab3685e5ea620fb2bc9ae4400f6d7cd181ec51bc5647f551d807f81fc66ec950a72e8299aa29317061b9f8f043b5da9cb91fc66d58b4ac33f691d6e77a86b32925e82a09e8709887bd98d42224b49ea749fe92b33f993b7bfcf25e2018f627374492a703c66201a2657845922b35c6540b456fc90b55aa553b22f30aee3792c5cf3ade735295a7a7b2a893da51e2f5aaf5158f0cf7dabb10f9c393e3eebb30ac11549f60435dd69ad5330e5c57973b15177fc4678416dc333e190ac6eeddc4e2a2b9102e236b88235d05d26a", 0x1000, 0x2a25}], 0x4000, &(0x7f0000000100)="402544f906000000000000003ac379a9cbd27f") write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000180)={0x0, 0x3f}, &(0x7f00000012c0)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000001300)={r2, 0x9}, 0x8) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4000) 16:14:41 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140207, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:41 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:41 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 4: syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x4, 0x80000) openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x181000, 0x0) dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rtc0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x240, 0x0) setsockopt$inet6_tcp_buf(r1, 0x6, 0xd, &(0x7f0000000200)="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", 0x1000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$bt_hidp(0x1f, 0x3, 0x6) listen(r1, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x6, 0x0) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000000100)) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x0, 0x0, 0x0, @local}]}) socket$key(0xf, 0x3, 0x2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xffffffffffffffe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000000080)=0x0) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000001840)={{{@in6=@local, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f00000000c0)=0xe8) stat(&(0x7f0000000100)='./file0\x00', &(0x7f0000001dc0)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000180)=0x0) r6 = geteuid() fstat(r0, &(0x7f0000002100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r8 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000002180)={{{@in=@rand_addr, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@remote}}, &(0x7f0000002280)=0xe8) r10 = getegid() sendmsg$netlink(r1, &(0x7f0000002300)={&(0x7f0000000040)=@kern={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002080)=[{&(0x7f0000000200)={0x360, 0x10, 0xc, 0x70bd2b, 0x25dfdbfd, "", [@generic="b6cc52ca0ada9a8c17f9bb2b45b9436968ee1b45b2fcc84e067bad90b6f3ed8ed93f0028944eaf735929b1f0794e54ed7c4d3df6522ad734d1a4bb4011a01de014f122e37a790340a699624112e81d557770f4d34fee2605b426b09a6e048caecec7703893fb74504608a9fc18f4dd14c24fff252e8517c1356955232ef899c0c34c5fb8dffde5b786140a6b2da20278ea1e09d671e8900e92585d3b50c94e787ec509f3fe233581b1497bb5a00571ad2990f49bc612ba91405affac9431110b137a5c8cf427b31d6f4bdac06abc9a854c07f7ea5f73ed5dbd1656e1bb30266b7008b704724363f6271ab099835b49a42d85174f7d4f8e6ee0bf4aa8cd", @nested={0x250, 0x81, [@generic="1748d23c914dcf6e245c7f6281806f7f70ab572b94ab63acd2f196711ebf8f97cffddbe9d2b06431fe10a890a376db128e643b2fe7bfb03c3091fa74", @typed={0xfc, 0x4d, @binary="49a2b977143b5899fa3df7faf7d9490c85c3192b695769dc4d525bb3ecf072cc729a2f3857cd4dbfbc2a38f47d59372a9c2c5bff51e315d7c9873efd71aeb143e2be2bfda068e2584a31d23c245370ded42913ffcc3a0a0fa6f98343c2f58604e0950114177c8a59b359dc3075ef26fae089f1a4eaa26c8aa183fd504cac0c1963e17c0dea2e1c80091b30461d8b5fbe632f23b0303ad1151d22a87436cd0bcf125140197dda8eb3d38adc8deb47212061adae90a1364b3df713fcb8c198c66cd9566290d3a121eb00631c256b352cfbf2bd333eaf13e0aff35dfcf1b3338af1498b64b2fc97cb045f23a1c648176e20abc4a8961c0af8b7"}, @generic="2aa27cb0a9592db626a612862a6821ba99832272a2c2537c53032b3413c43ff63b6360c7645138c0e27a6fd2176c04454942c63073f407e9deabb0f7ffb036788de1faa67520ee5732342288d117db285bdd85a0d3265c372f3d460144995c1af0919cc365b223183a048061bbaa15fe10f191bcf63c739175655e853456cb4db944383e25", @generic="0866200cc1aecf7b961110f86cd1", @generic="c5704226eb36bd33bf08aa6994d417b4bec3932e506eebf6ecb49215c21074769b2f230a6974904e3b15d815bb27c06922e1904be98c440ec3d41223f9cd7e16ae43edfcab6b20b6aab73c24e55230219b6c293790ae8d225c233b42f5bbcec7a923", @typed={0x8, 0x4c, @ipv4=@loopback}, @typed={0x4, 0x41}, @typed={0x10, 0x3f, @str='/dev/audio\x00'}]}]}, 0x360}, {&(0x7f0000000580)={0x1298, 0x31, 0x5, 0x70bd26, 0x25dfdbfb, "", [@nested={0x1288, 0xa, [@generic="c5f13914332f97f528c9128ba0ea39a955d6165aacab2f6193012d7de976dfd44b6a95dffc82915712c9daa84929cc4f81916e5daf0e05c8ea00645d2f916cace843b31d415e8ebfcb127c62da527b0e60ec7cf7d548eccdec45c254db2afd3f7ecaa7c98c58be73e2862fe77e92a8d3e3efc9d23a28d4b1aeeb72b972", @generic="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", @generic="a9d9b118b74864baaf0777502436e78716e40e36e8009c3e17c651df8923c7e7960653858aec3f00c4241caae14e1d3f9e3bbae34089fcbadc6e59d840e3a7a655879f42fcd2bc8fb78668824dfb1ad2fbd5af1981c301ef33840d4f4350338f4c893fa31cadbbaccc3bf469d3311434f78f6c71f1b51a242d6e575518f4d4779fa0ae9ceaeff073c99546f53d74615e572aeb07e40910442e3b98b0525b130f04f132211129adc8edf4d75d64f0ebc3948c05c25fd40fe0217e2e7c6ee8f94d0dff48db195606bd7864cd16e9afc255d10bbc7ffbc5d92832", @generic="ad4be882505c976af3fc1d82aa3bf8d258ec7796cd3cadabd574ebfdf1f4341303aa2bfe4ed093acc209f6265b0fdb3c1ab6cf8dfec3f5601cab84d417cdddef48549d596f02e5daaceb0516b317e3a94e83d4f630f00f8734023473e50379fa8cf31c30642841b172294ddb", @generic="e2b1ba223825ba3454f8321b38e74b95a3ce865a6382654dc4981b8cc0a9d8992d5c30f773aaab87d8467d3c039a39966dc089dfd506638196547ef11506c2d6b1c8b7ea3e3a668bdc799f2bb5f1aff76fe0cd6a00f709fe89c66fb3360496462d7995fa3d0aa3c65e4f9532842d2317608cbec99a7887181f0e2612da99f0edeab10ca3b05dbd1c6e26e347f0898bc503250130a79ac8fd12f8f705e919c73da08c9ed35641ec346b6b7aef607190efda12dfea0f2254", @typed={0x8, 0x53, @pid=r2}]}]}, 0x1298}, {&(0x7f0000001940)={0x1b4, 0x33, 0x120, 0x70bd25, 0x25dfdbfd, "", [@typed={0x4, 0x75}, @generic="ca744290810ff1e4a4b02015383a61f04692376cf67278a593cb12d7d2eb9d5ceccb405e9bbad9b60e7047909c35c53559a486fbb7225123188d79fe3112c5867e0127b7e378bbdec87d10c146c21f5138ce845f9a1795705e40c6d9a888af352ee33c5a32446afa9f66d5a6237f4cc85ee6bb11e58a7ead2447c74946e20c0b41fec0228dea92a0f2c12ae4f809d4284a3f48f14505de858342500c59065d17571186d0810277865f87d185cfe21c083b", @typed={0xc, 0x58, @u64=0x800}, @typed={0x8, 0x84, @u32=0x3}, @nested={0xd0, 0x17, [@generic="c3", @generic="bf96de7396859de9538614b1515d4006b5f678e571bc09ef38863a09c19734ff070087373260ff8e73cc4fe83849af21c799e0c8aebc6877a485b91ce3f280b3c2fa445717a1a213a810284733928f0838ee97213104981e4ee30f770f7d732c6b4821ca4c0dbb6aa506a6261a497d89856514f9f96305a1b16f6bd80f2da65273b9ec6c2c1f273b414cd1b7a983fafa2ea1bacb6e162ed1fe00cbc55d21cb226bbc9ad98808be543e41bb7521cff24e228d60480edc37568f4e737176f924ac7a4d88c63e51011fa30ebc"]}, @typed={0x8, 0x96, @uid=r3}]}, 0x1b4}, {&(0x7f0000001b00)={0x9c, 0x22, 0x20, 0x5, 0x25dfdbfc, "", [@generic="e3c339e67a2664201062ec79884559eb263e19aeee7ecf8a83468fc5240e6003", @generic="737a7798a4f0ef6986ab3af85b9e9d991ffb50ec4220d823abfad2c466d7fd3c2fd3509033de3f79970cb47c7dc789bb44382122c2d0710d6f22564f771a7fb785f8d78fe2ae2ecd16a822988e6542f56217df6e3cf386b0a35410882f43de8cd4a932fe648b1dadbaf2"]}, 0x9c}, {&(0x7f0000001bc0)={0x1dc, 0x41, 0x300, 0x70bd2a, 0x25dfdbfe, "", [@nested={0xe8, 0x14, [@generic="941acf4b2d3cef87ba6b6f9a9ec095c2b09c36387e1a098a9852639908d56c09a4f4c2aa5b6f485cfeb44e5b5eb0b6fa51b0f65e9f4a", @generic="c2", @typed={0x8, 0x41, @u32=0x10000}, @typed={0x8, 0x64, @u32=0x6}, @typed={0x4, 0x83}, @typed={0x4, 0x53}, @generic="65d2e7a97792afff8cbd55edeedf4335844db99482b5eae6863fe18e0400b7b8acbef86c3196931ba269d52d1d31c58e495d12bc837d803429aadd2cb109f74779e4ee837622803ebd2b378f7122fa1dfee16b48af2cdbd62ac69bd6b3980b6abf380209e305d9d02bc1d3a178332ed60125f712c493bb7dee2fab30cdc3ae9b4fc657a8d11eb079fb3e0139", @typed={0x8, 0x1a, @u32=0x3}]}, @generic="468a3b233d6996d92e245b06cadfbcfef2e907ef289e0385c6f31e6477ec9bdaa2f58d70b991147f6970e935e7b8754f90f2b1d3c11a31f3244f512777fafcb421decaad91fe7b70794c46e18d0ea0a970d55254db2e25dd16107120cb1bf96930f33546873f5ef9808b7104f66a7c601deefd83428b63b749f08bc6292d5659975955ca1d67c048c9db5d45c71c631eb092a3f15edfdc2f6b7d0d42078ae69009aa4dd3a24938fa9d2b6eb2f935607341ce1b56dae773ede196fab655d0287edba8a558f63c09e5494bd7261608bbafd743063c849ed906", @typed={0xc, 0x6b, @u64=0x101}]}, 0x1dc}, {&(0x7f0000001e40)={0x208, 0x3d, 0x200, 0x70bd27, 0x25dfdbfc, "", [@nested={0x1f8, 0x52, [@typed={0x8, 0x60, @u32}, @generic="02ce8d052f6bdaacacdb6c72e3f9d06b93f1c5fc2761656779ac67a55e447cd79a62ddb2f6bcecc61f5784d55ce856540b633071ad8e16836c0b069d19b9e7df14eb07774fbf3de0a9546d5d66c67741af19468dd4bfed2cdb4fa58ee33d1248dbea21baf1bb", @generic="8e48c2e78d25a92759a98b87c0e6b0d3745a21e066bf07e52a1be451e92bb33ba9136d5f0c19fa027bdf7af37a78f66daa35a0ccba2e1bd2e29864ed725d4ace33ee3d835e069de022b80b43be07c1102df3118bbfbfcf30d21608a50cbc6790f0c435f0d0709a3bd716f7e912e3a67f14989e3a263c1bb4019e7c", @typed={0x4, 0x8b}, @typed={0x8, 0x36, @uid=r4}, @typed={0xc, 0x31, @u64=0x800}, @typed={0x8, 0x93, @ipv4=@rand_addr=0xd1}, @typed={0x8, 0x87, @str='em0\x00'}, @generic="d5d7a156803ce0cbed7073c086d4a0be90486f33f2e70c3a1ab5e7334db226e7987c0b61eb8d6b5f14913228af61e2b94b0837a262a6833110d2da30404b1e074e4f62f4dbb175fa4ed0a3873be1c47a8006599d50e00c4dc6b72a84fb5a01058f8541923d222a6b2246fa735cab6b2bb33174fec63aba8dd6d802e14d8f4b47527679a03ba7f628a74ce6629d566117da4a5bd2d3899b2d7599326cc3bd4e0b814ea311203beda77ddfa0dd7a1c8ef353b7e2d735c3678a66fad3ddb0e653b479879d530f962ba47db7a5b1996e7b09bdb545b57c07fa7517f670add6d512e8302cb5"]}]}, 0x208}], 0x6, &(0x7f00000022c0)=[@cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}], 0x40, 0x4048000}, 0x4000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) fstat(r1, &(0x7f0000002340)) 16:14:42 executing program 4: r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x400002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) prctl$PR_SET_TIMERSLACK(0x1d, 0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:14:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffffffffffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r2, 0x404c534a, &(0x7f00000000c0)={0x5, 0x1, 0x40}) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r1, 0xc0bc5351, &(0x7f0000000000)={0x80000000, 0x0, 'client1\x00', 0xffffffff80000000, "416dd8130873f2fc", "3d2dfb63146a182e7f4f41c2921657ff9bca2c026c3b752a221b3f97d0c500b1", 0x9, 0x1}) 16:14:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$amidi(&(0x7f0000000000)='/dev/amidi#\x00', 0x6, 0x200000) ioctl$VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000040)={0x81, 0x8, 0x1}) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_NEW_SERVICE(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400004}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x24, r2, 0x2, 0x70bd29, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xde}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x40001}, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000240)='/dev/snd/controlC#\x00', 0x8000, 0x40) r1 = getpid() getpgrp(r1) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x6, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e21, 0xfffffffffffffc01, @empty, 0x1}}}, &(0x7f00000000c0)=0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000100)={0x6, 0x4, 0x200, 0x1ff, 0x5, 0x5f, 0x4, 0x7, r4}, &(0x7f0000000180)=0x20) 16:14:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = dup3(r0, r0, 0x80000) r2 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uinput\x00', 0x802, 0x0) write$input_event(r2, 0x0, 0x24) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$netlink_NETLINK_RX_RING(r1, 0x10e, 0x6, &(0x7f0000000040)={0xe351, 0xfd83, 0x3}, 0x10) 16:14:42 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$EXT4_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x8000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 4: dup3(0xffffffffffffff9c, 0xffffffffffffffff, 0x80000) syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x80000000, 0x20002) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x400100000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x1) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer2\x00', 0x200, 0x0) write$input_event(r1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:42 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:42 executing program 3: r0 = socket$inet6(0xa, 0x8000e, 0x564f) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x8, @mcast1, 0xa08}, 0x1c) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x80000, 0x0) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000000c0)={0x5, [0x926b, 0x5, 0x200, 0x3c, 0x1]}, 0xe) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x0, 0x2000) 16:14:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = dup2(r0, r0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000080)={{}, {r2, r3+10000000}}, &(0x7f00000000c0)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000100), 0x4) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x100004, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 5: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000001180)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r0, 0x8008ae9d, &(0x7f0000000180)=""/4096) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000080)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockname(r2, &(0x7f00000011c0)=@nfc_llcp, &(0x7f0000000040)=0x80) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f00000000c0)=0x200, &(0x7f0000000100)=0x1) fcntl$getownex(r1, 0x10, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000400)='/dev/audio\x00', 0x10800, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8000000000000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r0, 0xc0505510, &(0x7f0000000200)={0x9, 0x4, 0x3, 0x3f, &(0x7f0000000040)=[{}, {}, {}, {}]}) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/policy\x00', 0x0, 0x0) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_SET_VRING_CALL(r1, 0x4008af21, &(0x7f00000002c0)={0x2, r2}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 4: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x8000, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x80000001, 0x4000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) bind$bt_l2cap(r0, &(0x7f00000000c0)={0x1f, 0x4, {0x80000001, 0x7fff, 0xfff, 0x7f, 0x1f, 0x1}, 0x5, 0xfffffffffffffffc}, 0xe) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x500000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_LOCK(r1, 0x40405514, &(0x7f0000000000)={0x3, 0x7, 0x5, 0x12f, 'syz1\x00', 0x10001}) ioctl$SNDRV_CTL_IOCTL_PVERSION(r1, 0x80045500, &(0x7f0000000040)) 16:14:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup2(r0, r0) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000000)={0x0, 0x2, 0x20, 0x3, 0x6}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(r1, 0x0, 0x1e) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x119, 0x1, &(0x7f0000000040), 0x4) 16:14:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 4: r0 = syz_open_dev$cec(&(0x7f0000000000)='/dev/cec#\x00', 0x1, 0x2) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040)=0x400000000000000, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000100)='/dev/video36\x00', 0x2, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)=0x0) r3 = getuid() r4 = shmat(0xffffffffffffffff, &(0x7f0000ffd000/0x1000)=nil, 0x1000) shmdt(r4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @dev}, &(0x7f0000000200)=0xc) bind$packet(r0, &(0x7f0000000240)={0x11, 0x1, r5, 0x1, 0x2, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x14) ptrace$getregset(0x4204, r2, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=""/150, 0x96}) ioctl$DRM_IOCTL_GET_CLIENT(r0, 0xc0286405, &(0x7f00000000c0)={0x6, 0xcd, r2, 0x1000, r3, 0x4, 0x3, 0x3}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000380)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x800405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r6 = getgid() getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)=0x0) r8 = getegid() setxattr$system_posix_acl(&(0x7f00000001c0)='./file0\x00', &(0x7f00000003c0)='system.posix_acl_access\x00', &(0x7f00000004c0)={{}, {0x1, 0x5}, [{0x2, 0xb2c5711ec3930cb1, r3}, {0x2, 0x5, r3}], {0x4, 0x1}, [{0x8, 0x0, r6}, {0x8, 0x5, r7}, {0x8, 0x2, r8}], {0x10, 0x2}, {0x20, 0x1}}, 0x4c, 0x2) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x600000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x2) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = fcntl$getown(r0, 0x9) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x2, r1}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x401, 0x1) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0x40a85323, &(0x7f0000000040)={{0x3, 0x6}, 'port1\x00', 0x42, 0x120408, 0x401, 0x81, 0x6f, 0x130, 0x2, 0x0, 0x1, 0xfff}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, r1, 0x0, 0xb, &(0x7f00000000c0)='/dev/audio\x00', 0xffffffffffffffff}, 0x30) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={r3, r1, 0x0, 0x12, &(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', r4}, 0x30) ioctl$sock_SIOCGIFBR(r2, 0x8940, &(0x7f0000000300)=@get={0x1, &(0x7f0000000200)=""/202, 0xffffffffdd8d440d}) 16:14:43 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x4, 0x100000000, 0x7}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$XDP_MMAP_OFFSETS(r1, 0x11b, 0x1, &(0x7f0000000080), &(0x7f0000000000)=0x60) 16:14:43 executing program 3: r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x7, 0x10000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x100000001) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x3, 0x4, 0x18, 0x4, "5aed648cfeece2badadf5fd21c5d221d2a739fa74f6de933e4e4f0e4551e1933effbd7c20851da24d532b167d5ff00a15700ee852070cd83bf3dbf4a60bb5b89", "e90e47371c7d524cbc2295348145713e21831ab595314085bca8dae1fa83e49a", [0x7, 0xfffffffffffffffa]}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$VIDIOC_RESERVED(r0, 0x5601, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f0000000080)=[@in6={0xa, 0x4e20, 0x100000000, @dev={0xfe, 0x80, [], 0x16}, 0x8}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x200}], 0x38) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x6000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) socketpair$inet6_tcp(0xa, 0x1, 0x0, &(0x7f0000000000)) 16:14:43 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x400, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000040)={0x8, 0x3, 0x6, 0x400, 0x1000, 0xe06}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:43 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:43 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x700000000000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x3, 0x80000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_G_OUTPUT(r1, 0x8004562e, &(0x7f0000000040)) 16:14:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ppoll(&(0x7f0000000000)=[{r0}, {r0, 0x2080}], 0x2, &(0x7f0000000040)={0x0, 0x1c9c380}, &(0x7f0000000080)={0x7f}, 0x8) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = gettid() ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000180)=r2) pwrite64(r1, &(0x7f00000000c0)="b5f6381a0fdaaf17a644bae4dbfa8a8518c16ec341fbff498a6d1de892570ff920417665f8a9999b14da16c0f7ece6853889c42597d9590990c01c097d7240ac8fcdb0ee9bbcd118305635e738", 0x4d, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x6) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x2, 0x2) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000040)) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x778, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x6, &(0x7f0000000040)=ANY=[@ANYBLOB="181f0000", @ANYRES32=r1, @ANYBLOB="0000000000000000bd79feff10e7fffe940000000000000018000000810000000000000005000000"], &(0x7f0000000080)='syzkaller\x00', 0xfffffffffffffffd, 0xa1, &(0x7f0000000200)=""/161, 0x41100, 0x1, [], 0x0, 0xc}, 0x48) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x101000, 0x0) ioctl$KVM_ENABLE_CAP_CPU(r1, 0x4068aea3, &(0x7f0000000040)={0x7b, 0x0, [0x100000000, 0x3ff, 0x3, 0x101]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) acct(&(0x7f0000000000)='./file0\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000100)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x80000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xe7, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = gettid() r2 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x100) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={0xffffffffffffffff, 0x50, &(0x7f00000000c0)={0x0, 0x0}}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000200)={r1, r2, 0x0, 0x8, &(0x7f0000000080)='#system\x00', r3}, 0x30) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000240)='/dev/rtc0\x00', 0x40101, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x6, 0x6, 0x3}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:44 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000040)={0x0, 0x6bec, 0x1, [0x1d7]}, &(0x7f0000000080)=0xa) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000200)={r1, 0xb2, "6e84e86a7f17b22adfa44e419651095bc9ff4b94da426214b3ea336f74e27bc821d0d5010ab06c618098cb0b4cd7637356b358cdc5ffeff5ce513747873c7b7dd032b31cea2dbbac883b800d69ca8b308be0c2edb37c93c72160002280b6203148928e6dc7650928c8b81a43ab31b8ac26ca37c64be617af1194b2cd14dbe6c8ff6154df46698e655203719b9bc7e0e4d7a1c34adefaba77a2d8f66bbad2e59e9b1cee900c6d69a89847353847b44360bbe0"}, &(0x7f00000000c0)=0xba) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) getsockopt$inet6_int(r1, 0x29, 0x48, &(0x7f00000000c0), &(0x7f0000000100)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-control\x00', 0x8000, 0x0) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f0000000040)={0x0, 0x25a1db4, 0x3ff, 0x1f}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2400, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/policy\x00', 0x0, 0x0) getsockopt$XDP_STATISTICS(r1, 0x11b, 0x7, &(0x7f0000000180), &(0x7f0000000200)=0x18) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000240)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000001540)={{{@in6, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f0000001640)=0xe8) lstat(&(0x7f0000001680)='./file0\x00', &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$xfs(&(0x7f0000000400)='xfs\x00', &(0x7f0000000440)='./file0\x00', 0x0, 0x2, &(0x7f0000001500)=[{&(0x7f0000000480)="3cb6186de3ab4a4ece11959519e4c6de9a2d8c146798f6f00b098b255465151816847c792a5d78e9b150f469bcec92b9369cae4662e3e9ca758c1268ec86effb2f0fb504ee0f7b98d4bd8001f65561c35d13ac69d76d6b6586d6dce40aec959e7cbfdc4369cea0ed11474761ee25b234154c909b7d", 0x75, 0xf6ce}, {&(0x7f0000000500)="b9c0a3bbfb11b67f389087387f3dfbe4a4885bf77cecf2e2ca104edb083cb455db47202aceceb255051a1c1754f6581af31c619249ede92ad5b1a3483e41ee2c2e9412acb52028ab7a5c4edeaf656c47bf5cd98d37b07c8a0ba9e5cad11b6d15c18adebbba4f88b30ae58faada055790d707469902a062e99f3ee303e6bb5cec91e7168a4021b41032433f93746be95858ea17f64fd8a46f5251d5dd1ade8ef3b9eb89533ec08b137e9c5191e7e8473ee5b39ea5ff46b6f512faa5f130c1440a16f83240ce5db3a434b861ce67743674980305945e613873db81b753c1d7f9aba254c7e0a43b630d3c3b4aea5ab209526bf437a9266c240f6242c6b3f7cd9402c448ff1869b2b79a46ea21bbbce3c001cdc11d1230742c93bd2ec1f8dd723d20ae32fe78faac6246597dfcf2415e35e7339f7b5d65e4362f7380f0150e3f4db2032c441ac08aa56982aa5ea266e25eb31a71e3f45072617aa99fa8656dba3e22488dfc0b9e2549ee7fa574618fd4bf497cb7caf502424cdaf67c411d22a3ccd3e54f60c5c707affb6177db1bccda676e8cc08a0a4a10ca6c488766a9d8b231f90e3586a0447c824256108130872de646e1f5903788007af908e94344b015f6e626198de7e945481a6411b5993c294a9e7b9d8e105432e2d771cd4eaf374ae9732bb071e940a9b007847016d03888b594d92e682f789a2c6e17c7619e5070ca1fd7e86e61079f56d65f56ac83a08987ca9e728f61fc537c2c2658530d41acdff01182c50b21ab0d00503e30b74d3e369a335b9cd5e66611e81d356106ded6fcb2a710e2e52b05d14776bbe1de3bc07462ff94c7c2c5d97ceff59d8588318d0e1773be2dde0606f29a0b30d727a2699fe2aba38578f8910713ffce817d9d432a9b919de198c4b59851f5129496147bbdbfef46e1a9b2b03285ac04bf1a5cba0796039f6d3f2b73bc44c99766160f44f9f156e8c2be51c1068eec3cdb524bf542a8d1bfb14a8711b485de98941e4a07a5ceed6db38f884c2fe75948159c559915dc859128cf310842151bb160c31a20a2425d42a7c0c1e5180258594e31aec77b6f7f6382a6f004adab0a6959488697aeb0d3758d6da8be9469d00448dc44e4939dc3d0b35ebfb0f7b0e58827ba82782177f31717246d5a1ee9810791f28e47e9d8effa3c401149744e24671fbcb9e82868a7deb909524f15348a3d6fd8acd0c238aafead31747c73c3d91658426cf18fdcd891d05d533399afc8cc28b49ae0894e15aa1c80245ad76091fcc0c2dbd32b5d3a0cfa477dfae40bd1e628a2d5612ec1ec3460a233581ab52f0ba726fcba6e2207e693bdb28cee65e471fcd4d04e67417e52f461e39ab08633609d6a260b3ebe609bb5b38dd3ecaa0120b5b7c116da8a1d4e327b973747905f3563e176bd07a29d109b73e0fb758b9c825a38754c1ab177e4e2ec3d43276f13da89d65e950d5d640f9a0aa76afdb5944ead095d7d7ed5c9605d77b2f1d9f97a859e85068f830e3b52e10790a187697d33385e046ceb4c28640058cd1d61a35998d8ca7a43dbc307572ab5db3eb88b1585066f2d8308ff501540c1a9a825758b36c00f62339a61ab3a60aa85f1a99a1c2c249aee4ce2a05f9e9cf2096133eaedf98375f3d07bbda9b27f02e63642f596f3039f98d885d26d1df2264d4f415ac6b3c4636349c32d56b3f7267bb0471052b594d8b30bd2e1e035c49ac3a427f995bb999f3d703113e403cbecf2ebaeaf55b4dd3bae50a6cf5c413479682525e2bd95b6ca327fd5cad1fff7e52cc9bcf4951f4fc09c7d530a420a50c6e69c403e230398697d6f3e719939a333ad44d113abee2cd5cba03edf1c155a221b5bf0dc4e286cf711024b6b427df0e5c4e2d932418f22f41e1b6b09a064221310d3b6a31bdef7527fa7ae498ed025c23de620bafca8c98791f6b25a2689fd1ab988e9c3f56fce8d07db34db75dd82e9803e11f67ad41305f4f5d15e325e981f5a7da28e2243e7a71310c4d5b776c2094c284ab5f27feb11bcdda96ab8e5f3914b5a84675db6b0bc87c0402cb1272644756384cc98358c703325826e2b04e56ba2ef732127abf700ca43e7ab73b09317cd5d54f0c5be70337fc7be46bd0183f046ca4b3fac1676b90ed9aee0dc5789b1744d31f7c8e6388c2b6040c1ff31a12b3e467eecff3c454c7b0a9f5bf0d5c70253d50124b020d769b7e5b0bcc48e9b86ce5dca0574495852e10a5f9e7ad1c8e7f60806f2fc04df2d0dec8d69b975f8871d0c723868a47198b125be08193cd7020e855e532575166c9f9958262e71bc630664553395867e271c9f53176ac194a585b63e7d12a2782b0b86b0fe3cd25535da59378c7c1959199477040db1136528c1e2e71fc15aa1ec13fe5cec3ab8ce9026aecba34dca49655598a0b0c1e29acecf04e69aec6326dd408fc09041f1e9cfec9bd80f025945eea4ce862da88cae6b5d4b898f4e4b46e64cace346490fa29c78014842e949346304fb8468f93c036a2789bfe232afb60f9193ac1cfdce7dd701b5a8f8ab8c499bd6ef8d9775f6581ddc8657d1a19415f9574dec7f90b5708ba67bce97e049bf15d9e8f895c0907a8d717c0d20ba528406a387dabce0af4a310d1beac488b3ce12ace3b75e68b15b2451da000857b7640d16053000126902be9e4fc48257bddf94dbdd0af25fd1a56aa7d8770121c15c4ac85a7e6f2cc4e3b00075928ca67e9a892e56f1f37b2cb81a17b38b791c9e0d77350081a472d32675fb788502feb8ad2093c247eabc607b0c764669c84c1751db5b08f2c63abffc5457b8c8db09baf12eb8746b366ec4db690efe9152e3165e39e4762db98c41ab09e8ffd9abd235f259f610829bbd0c19efc5c2b63ac1d45af140ad653d4eecce4fc5acf01d98e36b3ed0d1c05e442413f33a8581402e37fd7dc0585db99b5a62fa0c50a77e7d9994e03c3ff85f3024cc3de9fa6b9455507c3fdd982fb5964481c158bdbcb936310b92e05268b6136a61be7e3e13b2aac03ffa72eda4b6900add996bd0c600459d04e017b56020d6da6c5694a07374a22e2697798c9acf80fb5873c772deec4a7a143d5528f9f940f5acd9b806678f9186aca876bcc0ab6874b4d5268aecf31e8d36bf9cf3089be049d635fb5accab7715254cbaece8765c79c38170cc7afe4fca3f6e7aae1f5c87ce64810a9535da7e82e6fcb46973a709c3f9b5c2458b0e6b3c2ff3b1e884deccf2696debcf1f9b067422065752fdbc548c9c409d916604040b3ab089e15d271fe8ba9d53ab47dd80bec0abce906102502ef4ff8e139484997325a24c478606454ac5bf4695dff5cac380e18c2086426ed2c1453e313c54dd89b3803a620128f299afa84a18a0ef69ec409c268d6f6685904162742736be3ef45b15e9008519ade827ba1fc2a268955a965b2d0335f1d6466612d1623853bd6144008072215b5ffb89caf0d592983ece81b7c52fe4d9a88b27b9f5a2cbef425f98598b2d1a285dc39806af279243ab839a4cc4cdf41b04e3087584c0dc236857a9002ac5df484701e36b5ae8cd9bbfab1507c9f91e4c206b7e65f79d22dc59190c1553a55deed4c1dd10694ebea8ac79b464f4338df6b1f36865e571d11d54b495b6c99f3dba1ccf9813860659b21b56e696b87ba897e61b3c11551c87509871ed792039c6cfc62b9702fe2066789af8ad0a1879001247f153aebf2041b22bbd1d76f20ebb434e88c18607f56bfe29387af42ea09f4f14c0e874553b3538d2d42a106ee7ebb38b98837ce7f66764f63c721c6e46b9217410e3330ac7411f01293ad39b26626616a284500d3cf78da33aa12199b027b89fe0bce188ac8ec8c94961620a2ee6f7430a4aa6f7085475b0825a0a472fe3ab333b5d04d67628d7e1af63b10225eecaf6713a9c15f8347f518fee238cc4945f43a075abdd38d41816d4e96a2fc2f35f41cd44366c5f2cb36205c182d11351c5638897049b5542dc35e2385158fdce6e40882964c0b11c4932790150a2b1159934e05109df0005a87d5bc46045d8d72f664b9d47a78bf605d37f6da1e393e0cf93c0e05a488a2ed1b5caec5ff29d57cd05b15e3f7ddebb48274ec475c9f0cb10d0eac85f176ef9700964e803d58cc7be38cf5d3c1f9c18b6f79280f8a0cfe93be17f98128f7c7b01d81bdebe64f44cff6b3ad029c9eabc0ce3810bc7f42168d139d7e8c3814991d41757bbdc839ad81a524e8806fa289cf7b509e688ef79946c87856cbfcd2ec793690b98430bcc4991935af57cc778debd32770b90b53817c4115d830cff4d4cf2e196906e95ae1ff35acd6a658070d013e7978cae9a149b9bea698639d9374e6f13fa5e4dafec3caf89fb8e472b2d98ed60d02ffc1e4d19d35249fdae249dd585a0dc792b1582fa5d9b174bacf1ad9cc45492628d5a6324f89be5b095e5c9674f1edf94c0464082b49170d149a80732db4a692fe192809309c16d1644b04ffc10fcbc048d1407abe8df68fd4e66712115c6f0faa17f7d24adda74e1b358a6ecb128e40ca131679fb06679829733f5f516fa8526f737650794f0bfe88f490a9de8c900f8fed6b065b759fb5defb8ed48ba0d914ce97c23e9eddb3bc2dd422f616eccdf19556fdb2d1f040b0154b63592bdcfdc28068ac4edbda1778e00430898e0e76d4ba6b7179f2d6696ad9148f6dbf02c82b7291ebd67bfd317aef2120f39995d48fa96dc800bdfa6350f7e422eadfff16d05a67c93976feae60065be5305799dc38232220c180f448ce612a6581c27148fff06f0a9e23efd10c328e4c6c5b2983dfd924f4dc266c5df1b1df4127dca55e06166d49806e53d29756c9eeae468bd82ba88de61efd491ead1d7f6cd992e89fd0ca73f2aa1dfc93172dd4f6b1a9e708a513f7957ad8af978bc883f4facc0309586ef351237327047d3ca2262c7aae0e7e519948f320d454ffe666e0553c4378d75c2eea1c035a2215a755eb25d511ef595227544e122bd3978e2795ae659014dd8ba2459160e9f9d1d91d131366bd9ad9a8dfbd7c459f771a057ea00147b62f2343fc820e8d8044f5a2edbdacbf248e85f3bc4f7d8b90e5c1da91bae07eea343d1e90f71ec936412f5dcac09c1160b89b11072c5242bc9e063c7de9d1037f1a853376b39d02a6cc898e560f24afebda5fe95b4109d3d0b68754399b5d9ac4a24eb97a6ebe9adcf4c19f554438191c5b42d115210478fe1cc71a09a37d84439ed7fd8d5f734411d8e98f675cb52390a0329222939883cf714dd648aec306e31d318aba39d4f486faa0da152a69fca9fc556cd30b7c7c9a342907bd1543d12140fc878992899f47b5b94afb56a154f813b1a8ac9998a9f9ea070c0e77fc82341199614a09af2bc969eecd088660c0e3e0def0a21c4097d8721345087c64731f0ffa5d2f2026bb518e000ea6287e9de7c5af00bef2dd742d3623e121c2395d98494d1dc5eaee5b3f4d13a60d97d1dd3cebc9840c53d91f19e6667ab123fc791f233903bd56083c5a357e0a6d0767df7a53d4f0b4f0a6637c01959e1dc3be3778074ce1d531bd07154ba5b8852d24f36f544bbc818b2cb8fe3deca5b23014273ffcb5aaaa4ea7f3276e1312ff39fb17507bb1fa1e5ed0778ce03a13e4e92f267c90a0a19cc0b78864cba3dc12a4f9fc9ac2e6668f8660315288bc701b3cf70f4ab012b2b65369d05f318ae2f66b5bdfb95cf97a6d988fc2bde4c338b7c4e989f4d8ee259b56a7953d1107dc02c011d39ae9258106b4d24eb3453262b2034273ca4c4fd241d59f67a", 0x1000, 0x81}], 0x800, &(0x7f0000001740)={[{@dax='dax'}, {@grpid='grpid'}, {@inode64='inode64'}, {@quota='quota'}, {@logbufs={'logbufs', 0x3d, 0xffffffffffffffff}}, {@nouuid='nouuid'}, {@ikeep='ikeep'}], [{@euid_lt={'euid<', r3}}, {@euid_eq={'euid', 0x3d, r4}}]}) fcntl$setflags(r0, 0x2, 0x1) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getresuid(&(0x7f0000000340), &(0x7f0000000380), &(0x7f00000003c0)) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)) 16:14:44 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$vcsa(&(0x7f0000000240)='/dev/vcsa#\x00', 0x6, 0x4000) ioctl$KVM_DIRTY_TLB(r1, 0x4010aeaa, &(0x7f0000000280)={0xff, 0x3}) write$RDMA_USER_CM_CMD_GET_EVENT(r0, &(0x7f0000000780)={0xc, 0x8, 0xfa00, {&(0x7f0000000600)}}, 0x10) pipe2(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$input_event(r1, 0x0, 0x0) write$UHID_GET_REPORT_REPLY(r2, &(0x7f00000005c0)={0xa, 0x5, 0xa8, 0x4}, 0xa) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x1002}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r2, &(0x7f0000000580)={0xe, 0x18, 0xfa00, @id_afonly={&(0x7f0000000540)=0x1, r4, 0x0, 0x2, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f00000004c0)={0xe, 0x18, 0xfa00, @ib_path={&(0x7f00000002c0)=[{0x3e, 0x0, [0x8f, 0xc00, 0xffffffffffff8000, 0x10001, 0x6, 0xfff, 0x81, 0x5820, 0x8001, 0x0, 0x20, 0x7fff, 0x40, 0xffffffff, 0x8, 0x2]}, {0x7, 0x0, [0xc85b, 0x56, 0x17f, 0x80, 0x7, 0x1, 0x8, 0x0, 0xbf59, 0x3, 0x7fff, 0x80, 0x5, 0x9, 0x800000000000, 0x6]}, {0x10, 0x0, [0x7, 0x7, 0x5, 0x5, 0x7, 0x4, 0x10001, 0x5a, 0x8, 0x1, 0x4, 0xffffffff, 0x5, 0x8000000, 0x80, 0x4a56]}, {0x38, 0x0, [0x400, 0x1, 0x7, 0x1, 0xffffffff00000001, 0xbdf, 0x7ff, 0x9, 0x3, 0xffffffffffffffff, 0x5, 0x7f, 0x2, 0x2, 0x3, 0xd0cd]}, {0x4, 0x0, [0x68bc, 0x5, 0x3, 0x7fffffff, 0x4bd3, 0x8cf0, 0x1, 0x100, 0xff, 0x7ff, 0xfffffffffffffff7, 0xcb1b, 0x2, 0x369c, 0x3, 0x10000]}], r4, 0x1, 0x1, 0x168}}, 0x20) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) recvmsg$kcm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/155, 0x9b}, {&(0x7f00000000c0)=""/10, 0xa}], 0x2, 0x0, 0x0, 0x9}, 0x40000040) ioctl$DRM_IOCTL_MARK_BUFS(r3, 0x40206417, &(0x7f0000000500)={0x371, 0x100000001, 0x5, 0x8, 0x2, 0x8}) 16:14:44 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:44 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000000c0)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x3) openat$apparmor_thread_exec(0xffffffffffffff9c, &(0x7f0000000080)='/proc/thread-self/attr/exec\x00', 0x2, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) fstat(r1, &(0x7f00000002c0)) 16:14:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 303.943526] XFS (loop4): unknown mount option [euid<00000000000000000000]. 16:14:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 304.057380] XFS (loop4): unknown mount option [euid<00000000000000000000]. 16:14:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 3: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8ea, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000005500)='/dev/ptmx\x00', 0x0, 0x0) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uinput\x00', 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000880)={'syz1\x00', {}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x6, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x100000001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x100000000, 0x0, 0x101, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x3, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0xf39, 0x80, 0x0, 0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80000000], [0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2, 0xffffffff, 0x0, 0x0, 0x100000000, 0x0, 0xd87e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x100, 0x0, 0xfff, 0x100, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10e3], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffff7, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x10000, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x1, 0x40, 0x7fff, 0x0, 0x3, 0xd7b, 0x7fff, 0x0, 0x0, 0x0, 0x4, 0xfffffffffffff801, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffffffffffff]}, 0x45c) perf_event_open(&(0x7f0000001080)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$evdev(&(0x7f0000001580)='/dev/input/event#\x00', 0x1, 0x28001) write$evdev(r1, &(0x7f0000000040)=[{{}, 0x1, 0x80, 0x2}, {}], 0x30) ioctl$EVIOCGKEY(r1, 0x80404518, &(0x7f0000000080)=""/4096) write$uinput_user_dev(r0, &(0x7f0000000400)={'syz1\x00'}, 0x45c) ioctl$UI_DEV_SETUP(r0, 0x5501, &(0x7f0000000300)={{}, 'syz0\x00'}) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001000)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f00000013c0)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000001600)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}, 0x2c, {[{@default_permissions='default_permissions'}, {@allow_other='allow_other'}, {@max_read={'max_read', 0x3d, 0x400}}, {@allow_other='allow_other'}, {@blksize={'blksize', 0x3d, 0x400}}, {@allow_other='allow_other'}], [{@smackfsdef={'smackfsdef'}}]}}) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='mountinfo\x00') ioctl$sock_inet_SIOCGIFPFLAGS(r4, 0x8935, &(0x7f0000001480)={'t\x00q"B\x00', 0xe0}) ioctl$TIOCGETD(r3, 0x5424, &(0x7f0000000140)) mount(&(0x7f0000001700)=ANY=[@ANYBLOB="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"], &(0x7f0000026ff8)='./file0\x00', &(0x7f000000c000)='ramfs\x00', 0x0, &(0x7f000000a000)) mount(&(0x7f00000018c0)=ANY=[@ANYBLOB="3897c61e2344b35ce4b0e8eb675766d6275488bb0f4f52ffa1089aa43a2ddadfc651515d2fc62ad4da06aa3a13845f45fb62c3704e9f3f984b6b7b1039cfd93e445671550a8331d137b6734072e64ca19dd5df6415f9adc59bcb66e30ec1bb1f46b50bc92f6d03da64383959985f0cdd144e46699f68fb6caa22b40316d709e4f0fd0a39ecffc9c7a00f27cc5edf7390b8dc5d37e0042bd5216b0032cf2515872d23be8d1edddd50e291622e128abf69100a6fb8808107748f7de2377f30f022cd18a8f87967521c4436cfc1444d60710d8bdbccc30214f1a2897186e30fde1b2fd167afedd372336bd71a8dc3903f1362ec193961762c805feb48a7366b13ec2a8c5a41818af1b6acb9b9e56dbeaa00ebe2540aa10acbe60364a117c83eef261aeab7fcecbd917b5aeddec9619ae5f1ad72ea6d02ff1f2fa726864a98b61b357ce69b52cd3d690c875abfff1555a3338193bac92fded45dbddccdb2002944ca95bae8deb92e2323382cf90266040f1f915eb64e09b5a597fdea60487d26474e8cc153b24b8fe038b06da71dfdc19177036c48a6db0fa1c1458a2efa9b714133e39a432e3742eb90"], &(0x7f0000903000)='./file0\x00', &(0x7f0000811ffa)='bdev\x00', 0x100000, &(0x7f0000444000)) mount(&(0x7f0000001500)=ANY=[@ANYBLOB="8e11c1aa9d11da12c29fab52f51b5c512c0cf705bd750d70617b4a2d8a010000000a14010036804c17bcada44af0a8758b28ceae50131e5248c177335dd70000000000eaffffff0000000000000000000000"], &(0x7f0000000340)='./file0\x00', &(0x7f0000fdb000)='ubifs\x00', 0x80010, 0x0) mount(&(0x7f0000001a80)=ANY=[@ANYBLOB="36fcf0a5c67e3fc35e8ad531e4daa7c28eb2c297595bdc2ed8b4cd21ddee74021ff2576ad49f6a7c0180ffffffffffff6dac600aaee87c02f62b46ae174dfd7035df9917479db88f28e55f9b6f49a1b7c7b7c52c887fd15e40f83b9c892e73f234f7c616602f111b379eeeeaca50f40fde470edbced8b082b4d1ec7c7be09f7ac9917967fc4ee6aec7954f0000000000000000000000e2fc56da575a3b88dd475dfafb2fc16d11c5f117f0a95c68b3c6df23bfecac2370ee1c84a3c2cd021289f9221a8238e01c7fe06db3fc35dad5260ed7a1"], &(0x7f0000001180)='./file0\x00', &(0x7f00000011c0)='ramfs\x00', 0x182400, &(0x7f000002f000)) pivot_root(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0\x00') mount(&(0x7f0000001200)=ANY=[@ANYBLOB="a4b1b2ee80367ae7875becc7502c078edf7d881b1f68442cd1ee6692f5ee2116a19bafca2eb24ff0a52bf2945975a435d74b1ea2ceea71d5a3071ae89f5209c76c6e1b6cf9814def8f1bb4dfa88a830b230f2c0f75012f0c603506aab38d2e2a05d163334c15212e3dc6348d92ee5f893317cd21100482f6754713e25d289d4912a6fc513c902080be741105007792"], &(0x7f0000001100)='./file0\x00', &(0x7f0000001080)="6d867ad2a83f1fafa7f3736cb4ff00", 0x5010, &(0x7f00000e7000)) getsockopt$inet_mtu(r3, 0x0, 0xa, &(0x7f0000001140), &(0x7f00000012c0)) preadv(r4, &(0x7f0000000040)=[{&(0x7f0000003200)=""/4096, 0xdcb}], 0x1, 0x400000000000010) ioctl$int_out(0xffffffffffffffff, 0x2, &(0x7f00000001c0)) utimes(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)={{0x77359400}, {0x77359400}}) close(r2) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000040)={&(0x7f0000000180)={0x10, 0x40030000000000}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x1c, 0x34, 0x119, 0x0, 0x0, {0xb501}, [@typed={0x8, 0x2, @fd}]}, 0x1c}}, 0x0) 16:14:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x180) write$uinput_user_dev(r0, &(0x7f0000000200)={'syz0\x00', {0xf9c, 0x401, 0x507d, 0xfffffffffffffffb}, 0x10, [0x3fc, 0x9fb9, 0x80000001, 0x2, 0x0, 0xfc, 0x6c3, 0x9, 0x2, 0x7, 0xffff, 0x4, 0x8, 0xffffffff00000000, 0xdd98, 0x5, 0x6, 0x8, 0x7, 0x10001, 0x9ddc, 0x75fd, 0x5e, 0x2, 0x6, 0x3, 0x9, 0x1, 0x1800000, 0x92c, 0x5, 0x4, 0xffffffffffffffff, 0x2, 0x8, 0x9, 0x0, 0x401, 0x1, 0x5, 0x7fff, 0x0, 0x9, 0x4, 0xffffffff, 0xa1b, 0x2, 0x0, 0x6, 0x7fffffff, 0x7283, 0x5, 0xe44, 0x1, 0x3, 0x0, 0x100, 0x800, 0x2, 0x5, 0x9, 0x9, 0xec, 0x7], [0x10000, 0x2, 0x47af, 0x6, 0x7, 0x4b48, 0x80, 0x80000000, 0x8, 0x6, 0x40, 0xd1, 0x1, 0x9, 0x0, 0x7, 0x8, 0xfffffffffffffffc, 0x5, 0x1, 0x20, 0x1, 0x2, 0xffff, 0xa5, 0x800, 0x287d, 0x7, 0x9, 0x5, 0x5, 0x9, 0x1000, 0x2, 0x0, 0xfffffffeffffffff, 0x9, 0x4, 0x3f, 0x1, 0x101, 0x6a2c, 0x7f, 0x40, 0x8, 0x100, 0x3689, 0x6, 0x8001, 0x80000000, 0x8, 0xfffffffffffffff7, 0xffffffff, 0x101, 0x61, 0xff, 0x0, 0x8, 0x7, 0x7f, 0x8, 0xed, 0xbaf8, 0x101], [0x10001, 0x401, 0x3, 0x1, 0xc2, 0x1, 0x100000000, 0xc66, 0xffffffffffffff40, 0x0, 0x2, 0x101, 0x7, 0x81, 0x9, 0xa9, 0x9, 0x7fff, 0xffff, 0x1800000000000000, 0x2, 0x3f, 0x1, 0x2, 0x5, 0x6, 0x1000, 0xb9, 0xd0, 0x0, 0xfffffffffffffffd, 0x1, 0x3f, 0x8000000, 0x3, 0x7ff, 0x40, 0x2, 0x11, 0x40, 0x3, 0xf4, 0x8001, 0x5, 0x2, 0x8, 0x3, 0x6, 0x100000001, 0xf2, 0x60, 0x1, 0xfffffffffffffffc, 0x0, 0x8, 0x5, 0x400, 0x8, 0x97f, 0xf8d4, 0x8, 0x80000000, 0x8, 0xa322], [0x3, 0x1ff, 0x6, 0xbd9, 0x4, 0x4, 0x9cac, 0x1, 0x7, 0x3f, 0x4, 0xfffffffffffffff8, 0x101, 0x100, 0x0, 0x1, 0x9, 0x7, 0x70, 0x2, 0x9, 0x4, 0x100000000, 0x0, 0x7ff, 0x4, 0x1, 0x0, 0xff, 0x100, 0x8001, 0x9, 0x100000000, 0x7fff, 0xffffffffffffffff, 0x101, 0x400, 0xff, 0x8000, 0x3, 0x3321, 0x7, 0x3, 0x0, 0x2, 0x3f, 0x7, 0x6, 0x3, 0x0, 0xe26, 0x1f, 0x4, 0x1, 0x6, 0x100000001, 0x3, 0x7, 0x6, 0x4, 0x1, 0x80000001, 0x7f, 0x3ff]}, 0x45c) connect$llc(r1, &(0x7f0000000040)={0x1a, 0xfffe, 0x401, 0xc0000000000000, 0xbb47, 0x1, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x10) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:45 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x2000000007, 0x408002) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 304.307413] input: syz1 as /devices/virtual/input/input5 16:14:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0xffffffffffffff19) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:45 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_stats\x00', 0x0, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000200)={0x8400, 0x1, 0x2000}, 0x141) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r3 = getuid() getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000000)={{{@in=@multicast1, @in=@broadcast, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000000100)=0xe8) setreuid(r3, r4) 16:14:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:45 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x400100000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 304.646046] input: syz1 as /devices/virtual/input/input6 16:14:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:46 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x408) 16:14:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) sendmsg$nl_generic(r1, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x142010c0}, 0xc, &(0x7f00000000c0)={&(0x7f0000000200)={0x12c, 0x26, 0x102, 0x70bd2c, 0x25dfdbfd, {0x1e}, [@typed={0x100, 0x3d, @binary="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"}, @typed={0x18, 0x7a, @str='/dev/snd/controlC#\x00'}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000004}, 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000000), 0x4) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$sndseq(r1, &(0x7f0000000040)=[{0x100, 0x0, 0xffff, 0x7ff, @tick=0x20, {0x9, 0xfff}, {0x45e, 0x4}, @time=@tick=0x20}], 0x30) 16:14:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x5) 16:14:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x400100000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f00000001c0)='/dev/snd/controlC#\x00', 0x3, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x9, 0x10000) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000200)=0x7) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x1f) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = semget(0x3, 0x1, 0x6c) write$P9_RSETATTR(r1, &(0x7f0000000180)={0x7, 0x1b, 0x2}, 0x7) semctl$GETVAL(r3, 0x7, 0xc, &(0x7f0000000080)=""/132) setsockopt$inet6_dccp_buf(r2, 0x21, 0xcf, &(0x7f0000000240)="0340", 0x2) 16:14:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$DRM_IOCTL_ADD_CTX(r1, 0xc0086420, &(0x7f0000000000)={0x0}) ioctl$DRM_IOCTL_RM_CTX(r1, 0xc0086421, &(0x7f0000000040)={r2, 0x1}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) bind$bt_sco(r0, &(0x7f0000000080)={0x1f, {0xa0d5, 0x100000001, 0x200, 0x800, 0x2c80, 0xe788}}, 0x8) 16:14:46 executing program 5: r0 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x10100, 0x0) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f00000000c0)={0x2, r1}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(r1, 0x0, 0x24b) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblc_expiration\x00', 0x2, 0x0) ioctl$UI_SET_ABSBIT(r3, 0x40045567, 0x3) r4 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000200)={0x0, 0x82, "6cf36b39e764721e64f3fe8d6f171665b4731e0fd9b70a308c6a201abb1347eefefe36d0fe850e006fc5be8bf734161cc3a1f0b54ea0de6babbe706f25edf1ce75cc98d757b7e6e26e85a879e1a8c19b73f3cae241c2e2879c0ed4d246601bf1b22f2797e2ca1f90580c99ac6b90c389e920c22f3efaef490c1c4476cd63870713a9"}, &(0x7f0000000100)=0x8a) setsockopt$inet_sctp_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000180)={r5, 0x273, 0x1b, "86456b22c24e236934dec82e67e1e0a83b4e867e1f988413649fcc"}, 0x23) 16:14:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc04c5349, &(0x7f0000000040)={0x20, 0x10000, 0xab}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:46 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x20, 0x181000) ioctl$DRM_IOCTL_DROP_MASTER(r1, 0x641f) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x8) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r1, 0xc04064a0, &(0x7f00000001c0)={&(0x7f0000000040), &(0x7f00000000c0)=[0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x1, 0x5, 0x9}) 16:14:46 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:46 executing program 4: r0 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x1, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000200)='/dev/snd/controlC#\x00', 0xfffffffffffffffe, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$sock_FIOGETOWN(r1, 0x8903, &(0x7f00000000c0)=0x0) fcntl$lock(r0, 0x26, &(0x7f0000000100)={0x0, 0x7, 0x678f, 0xff, r2}) accept$nfc_llcp(r1, &(0x7f0000000000), &(0x7f0000000080)=0x60) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000180)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000280)={r3, @in={{0x2, 0x4e20, @multicast2}}, [0x7c, 0x400, 0x5, 0x200, 0x5, 0x3000000000000000, 0x9, 0x6, 0xffffffffffff328b, 0xb69, 0x10000, 0x6fb, 0x7c3, 0x20, 0x7]}, &(0x7f0000000380)=0x100) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000000)=0x9) 16:14:47 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuacct.usage_sys\x00', 0x0, 0x0) 16:14:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000000)={0x1, 0xffffffffffffff9c}) 16:14:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x4001000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6, 0x40201) 16:14:47 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) syslog(0x1, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getgroups(0x6, &(0x7f0000000000)=[0x0, 0xee01, 0x0, 0xee01, 0xee00, 0xee00]) r2 = getgid() r3 = getgid() getgroups(0x3, &(0x7f0000000040)=[r1, r2, r3]) 16:14:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = socket$bt_rfcomm(0x1f, 0x8000000000000, 0x3) getsockopt$bt_BT_VOICE(r1, 0x112, 0xb, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x2) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000200)={"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"}) 16:14:47 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$VIDIOC_RESERVED(r1, 0x5601, 0x0) [ 306.769351] kauditd_printk_skb: 3 callbacks suppressed [ 306.769366] audit: type=1400 audit(1543162487.783:59): avc: denied { syslog } for pid=11950 comm="syz-executor3" capability=34 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=capability2 permissive=1 16:14:47 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) r1 = syz_open_dev$mice(&(0x7f0000000040)='/dev/input/mice\x00', 0x0, 0x90282) ioctl$VIDIOC_TRY_ENCODER_CMD(r1, 0xc028564e, &(0x7f0000000080)={0x2, 0x0, [0x1000, 0x0, 0x80000000, 0xff, 0x2e7, 0x40, 0x0, 0x7b3b]}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:47 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:47 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$input_event(r1, 0x0, 0x5c5) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:47 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x3, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) munlock(&(0x7f0000ffd000/0x1000)=nil, 0x1000) 16:14:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) stat(&(0x7f0000000180)='./file0\x00', &(0x7f0000000280)) r1 = syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x1, 0x2) ioctl$DRM_IOCTL_MODE_SETCRTC(r1, 0xc06864a2, &(0x7f0000000200)={&(0x7f0000000100)=[0x7, 0x0, 0x80000000000000, 0x6, 0x3], 0x5, 0x6, 0x8, 0x5, 0x7fff, 0x1f, {0xe3, 0x0, 0xffffffff, 0x1, 0x7, 0x32e, 0x1, 0x323b, 0x6, 0x4, 0x80, 0x8001, 0x9, 0x2, "e28239de1b14ca34fdee235962bc8b4d1f0da700"}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x409) 16:14:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r0, &(0x7f0000000080)={'syz1', "d520d03e9be1990b4601e1b83fc39f0e3c5e4d8bb3fde4122f70dd5cf846a78410f5b0819a2765d5386eea038f672037fef02817ef5fa840ca"}, 0x3d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0xfffffffffffffffb, 0x0) getsockopt$inet6_int(r1, 0x29, 0xf9, &(0x7f0000000000), &(0x7f0000000040)=0x4) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x5, 0x20000) 16:14:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7ff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xff, "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"}, &(0x7f0000000180)=0x107) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r2, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x20}}}}, 0x84) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$FS_IOC_GETVERSION(r1, 0x80087601, &(0x7f0000000000)) 16:14:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x1, 0x3) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/self/net/pfkey\x00', 0x200, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r1, 0x84, 0x4, &(0x7f0000000100)=0x5, 0x4) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000), &(0x7f0000000080)=0x4) syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x1bf, 0x404) 16:14:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x100004, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x201) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x986, 0x1) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_RAWMIDI_IOCTL_STATUS(r2, 0xc0385720, &(0x7f0000000000)={0x1, {0x77359400}, 0x9, 0x5}) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r2, 0xc1205531, &(0x7f0000000200)={0xfffffffffffffffd, 0x7, 0x7, 0x5, [], [], [], 0x7, 0x8, 0x3, 0x1, "5dcad95441082279655b329538a2a560"}) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r1, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000000340)={0x1b0, r3, 0x8, 0x70bd2b, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x1}, @IPVS_CMD_ATTR_DEST={0x2c, 0x2, [@IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e23}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x9}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x1}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0xfff}]}, @IPVS_CMD_ATTR_DAEMON={0x48, 0x3, [@IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @dev={0xac, 0x14, 0x14, 0x1b}}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x7}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1b}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8}]}, @IPVS_CMD_ATTR_DAEMON={0x58, 0x3, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, [], 0x1e}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x8, 0x8, 0x8a}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'bcsf0\x00'}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @ipv4={[], [], @remote}}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x8, 0x4, 0x9}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xb8c}, @IPVS_CMD_ATTR_SERVICE={0x44, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0xc, 0x6, 'lblcr\x00'}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8, 0xb, 'sip\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x10, 0x2}}, @IPVS_SVC_ATTR_PROTOCOL={0x8, 0x2, 0x2f}]}, @IPVS_CMD_ATTR_DEST={0x4c, 0x2, [@IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x4}, @IPVS_DEST_ATTR_PORT={0x8, 0x2, 0x4e20}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x800000}, @IPVS_DEST_ATTR_INACT_CONNS={0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x9}, @IPVS_DEST_ATTR_ADDR_FAMILY={0x8, 0xb, 0xa}]}, @IPVS_CMD_ATTR_DAEMON={0x28, 0x3, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x8, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x80}, 0x80) 16:14:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x8200, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x1, 0x6, 0x1, 0x5, 0x7}, &(0x7f0000000180)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000200)={0x9, 0x8003, 0x6, 0x5, r2}, 0x10) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$bt_BT_VOICE(r3, 0x112, 0xb, &(0x7f00000000c0)=0x1000, 0x2) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000080)={r3, 0x50}, 0x10) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) pipe(&(0x7f0000000000)) syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x8, 0x200) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1e9, 0x40) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x80, 0x20000) write$input_event(r1, 0x0, 0xd1f35779b40fa6b2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x4001000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x300000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_DQEVENT(r1, 0x80885659, &(0x7f0000000000)={0x0, @src_change}) 16:14:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x2400, 0x0) ioctl$RTC_SET_TIME(r0, 0x4024700a, &(0x7f0000000040)={0x15, 0x18, 0x8, 0x2, 0x8, 0x100000000, 0x4, 0xce, 0xffffffffffffffff}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x200000, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x2d4000000, 0x20202) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0xc, 0x3f, 0x79f8, 0x3, 0x8, r1, 0x3a}, 0x2c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) fcntl$setlease(r2, 0x400, 0x1) 16:14:48 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) read(r2, &(0x7f0000000200)=""/4096, 0x1000) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)={r2, 0xffffffffffff8000, 0x8000, r2}) 16:14:48 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_CTL_IOCTL_HWDEP_INFO(r1, 0x80dc5521, &(0x7f0000000000)=""/95) 16:14:48 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:48 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 307.917198] audit: type=1400 audit(1543162488.943:60): avc: denied { map_create } for pid=12087 comm="syz-executor3" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:14:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = dup3(r0, r0, 0x80000) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) ioctl$SG_GET_PACK_ID(r0, 0x227c, &(0x7f0000000040)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) memfd_create(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x6) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000040)=0x402, 0x4) sync_file_range(r1, 0x5, 0x2, 0x4) 16:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x2, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x9) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x301000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) openat$cgroup_ro(r1, &(0x7f0000000000)='cpuset.memory_pressure\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = accept$inet(0xffffffffffffffff, 0x0, &(0x7f0000000240)) fchmod(r0, 0x10) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = add_key(&(0x7f0000000000)='rxrpc_s\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)="85e489199593772df7e441767c7b396e71268c43c3a55ee886154eeea449f8b0a934879e3adfb56b53d58cf27675a41fd46356b474fffe3957ccc888e954cefdda60b758a32e273a507dd73dec6472171bee4f7059fc87cf60bd14b017e42dd9b891db5dd1d111375e16e632e121d0c65c0ee26f1c7895603d8f9b9828fd548be5e66e370615cce0ad3b58a9c734c3dde0a1333bd6ab9329701970086560678eba9aa0014cb9db0f92", 0xa9, 0xffffffffffffffff) keyctl$get_security(0x11, r2, &(0x7f0000000180)=""/181, 0xb5) ioctl$TIOCSCTTY(r1, 0x540e, 0x23) syz_open_dev$sndpcmp(&(0x7f0000000280)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) close(r1) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x0, r1, 0x1}) 16:14:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x40d, 0x2000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x800, 0x100) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_DEL_DEST(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x30, r2, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_SERVICE={0x14, 0x1, [@IPVS_SVC_ATTR_PORT={0x8, 0x4, 0x4e21}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wrr\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000004}, 0x1) 16:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000080)='/dev/midi#\x00', 0x1d0e, 0x20000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0x0) keyctl$set_timeout(0xf, r3, 0x8) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_INTERVAL(r2, 0xc040564b, &(0x7f00000000c0)={0x4, 0x20, 0x2022, 0x9, 0x3f, {0x0, 0x4}}) syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x9, 0x2c0078) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PVERSION(r0, 0x80045500, &(0x7f0000000000)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0xffffffffffffffff, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x4001000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x98, "c61f17ca6577553a47cc839830e9b356f12bacc23e3b24036f85680f9cc6cdcd454251e9695c5f6808c4be4421e9aa61763b57c6812cbc80c6b8ac365fe4ca566014db82b0ea754e1b7beed5ff7c124f9a71634d1c92310a25d85d4a0cf54728d8cdf7d3eea5379fd1b24af7aeaed5bf4075caeeb818418ca13bf1185adfa323a217bff4154a7f4bc5725be0e564d99d1fd670287a04def9"}, &(0x7f00000000c0)=0xa0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000100)={r2, 0x5}, 0x8) 16:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 4: r0 = syz_open_dev$dspn(&(0x7f0000000200)='/dev/dsp#\x00', 0x0, 0x400) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000240)='/dev/null\x00', 0x101140, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = request_key(&(0x7f0000000000)='encrypted\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', 0xfffffffffffffffe) r4 = request_key(&(0x7f00000000c0)='trusted\x00', &(0x7f0000000100)={'syz', 0x0}, &(0x7f0000000180)="9f5c00", 0xfffffffffffffffe) keyctl$link(0x8, r3, r4) getsockopt$inet6_tcp_int(r0, 0x6, 0xf, &(0x7f0000000280), &(0x7f00000002c0)=0x4) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:49 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = memfd_create(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x5) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r1, 0xc0a85322, &(0x7f0000000040)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:49 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0xff, 0xb61, 0x0, 0x5}) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000200)={0x0, 0xfa, "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"}, &(0x7f0000000080)=0x102) setsockopt$inet_sctp_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f00000000c0)={r3, 0x3}, 0x8) ioctl$TIOCNXCL(r1, 0x540d) 16:14:49 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x500, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:49 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0xc000000000000, 0x100) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000040)={0x0, 0x80000, 0xffffffffffffff9c}) ioctl$DRM_IOCTL_GEM_FLINK(r0, 0xc008640a, &(0x7f0000000080)={r1}) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x80) ioctl$SNDRV_TIMER_IOCTL_START(r0, 0x54a0) 16:14:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 5: r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300)='/dev/sequencer\x00', 0x801, 0x0) ioctl$EVIOCGMASK(r0, 0x80104592, &(0x7f00000000c0)={0x0, 0xa2, &(0x7f0000000200)="752bf2305b737eaeb69293c2934366d685c06e03b4c20dad3fde3044ff595bca1a290f88de6537a896de5fc69404d818a9ef7d1dc01da845b972d7fc6692b5699fc7685509195f69f5d211b119b0bfbedd4065b6622b2b1439e0a0b8910e2a6677af37edf9dbb9086f4ed1b44104c0ab0ca23e394a3aa67155537ed125acd680db07cc8125b381c2ddabbd1c360975f8210df1f4725689422060479a35fbd051b314"}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_ZERO(r1, 0x0, 0x48f, &(0x7f0000000040)={0x3c, @dev={0xac, 0x14, 0x14, 0x16}, 0x4e23, 0x4, 'none\x00', 0x4, 0xffffffffaae43a46, 0x8}, 0x2c) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) readahead(r0, 0x5, 0x4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x48302, 0x0) 16:14:50 executing program 4: openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x0, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000180)=0x1) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:14:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x400000001) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x680000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfd, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x400001) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f00000000c0)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000180), 0x4) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r2, 0x84, 0x16, &(0x7f0000000080)=ANY=[@ANYBLOB="0700000003800919001004000800d96b310004"], &(0x7f0000000040)=0x12) ioctl$FITRIM(r2, 0xc0185879, &(0x7f0000000100)={0x1000, 0x5, 0x1}) 16:14:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84000) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000080)='nbd\x00') sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x20, 0x70bd25, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x8080) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x5000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0xcfa1a2cd34fc7e28) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000280)=0x4000000063ff) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000004, 0x100000000407) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000000)={0x0, @remote, @loopback}, &(0x7f00000001c0)=0xc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES64=r3, @ANYRES64=r4/1000+30000, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0400004001000000040000203503000068c551279669acba4376de366c5ee257f9fd82eef7a76a5097bd805e1376f84a105f3dcaff653808f10550d5ea0a62f6f2ce8ff084f8e7ab76dfc67a0cb4f45c468556a787882339ea2ec01953495931f482cb923c9f7a7a7e35a5ce23bee03991a6e18c8944a68496d0ae578ed1845622f829993efc5a0349788a7d87dabe4ebaa9f242c4d79cfea4b1ee2b6d84d3ec655c542c7c8b9db26f5aeb5d3920b93785e8b31d9057b306314f7c1915f7c7cf45b68b4c358e0a2cae2fa915071212ee8efd680590ad65af3a0c227f14b56c5eeba36a71e7830b56f29d13a5b0e16bc7eefa1d72d3ad49ec36d03942d0f2cb5c1148fa231448d32b31b7b30ac26bdd86f9953fc870b14aae7a87caddef1ea3b8c4"], 0x80}}, 0x8000) 16:14:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x6004, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x10001, 0xb10}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x200000004000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$packet_int(r1, 0x107, 0xd, &(0x7f0000000000)=0xfffffffffffffff7, 0x4) 16:14:50 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x48e100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:50 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:50 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write(r1, &(0x7f0000000000)="4f1d10854c1c80736a185798072f6021835646d7ab85ef58391f55296b7b7a16e37d716d3db6625f4cb1de966e05875f8888223baebd740ec6c3b1f138ba3bc6004bb88674b6ef0825615f5e62ca166132f380b95a876616ebab73591cede37e7a975b62e8be0952896fa4b8f17ba59fbc432d293cb1663d", 0x78) 16:14:50 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x0, 0x0) 16:14:51 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000180)={0x0, 0x80000, 0xffffffffffffffff}) fsetxattr$security_capability(r0, &(0x7f0000000200)='security.capability\x00', &(0x7f0000000240)=@v2={0x2000000, [{0x81, 0x20}, {0x7, 0x3f}]}, 0x14, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x40000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000280)=0x4000000003) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) sendto(r2, &(0x7f00000002c0)="74a598540f419baa89689c28313cd39145cf82d0a321b24b28dbaa8124708d637eba5131f827d1d06879e3f2a593fbce038add60f4755a2e4ca9b73ba31084c9753b0d5c752a2c47b9feeea43cf23059d5", 0x51, 0x800, &(0x7f0000000380)=@ipx={0x4, 0x0, 0x6, "ab717e72f47f", 0x1}, 0x80) r4 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/mixer\x00', 0x80, 0x0) accept$packet(r3, &(0x7f0000000080), &(0x7f0000000100)=0x14) getsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, &(0x7f0000000040), &(0x7f00000000c0)=0xffffffffffffff49) ioctl$TIOCMGET(r4, 0x5415, &(0x7f0000000340)) 16:14:51 executing program 3: socket$inet6(0xa, 0x80f, 0x1f) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000180)='/dev/swradio#\x00', 0x1, 0x2) ioctl$KVM_GET_CPUID2(r2, 0xc008ae91, &(0x7f0000000280)={0x3, 0x0, [{}, {}, {}]}) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f0000000000)=0xfdfffffffffffa1b, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, 0x0, &(0x7f0000000100)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) connect$l2tp(r0, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x10}}, 0x4, 0x3, 0x1, 0x2}}, 0x26) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x200402, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r3, 0x4008240b, &(0x7f0000000200)={0x3, 0x70, 0x6b00, 0x4, 0x10000, 0x9, 0x0, 0x6, 0x64000, 0x2, 0x8000, 0x6, 0x5, 0x7f, 0x80000001, 0x5, 0x4, 0xfffffffffffffff8, 0x8, 0x1, 0x2f7986d6, 0x4, 0x1, 0x7f, 0x4, 0x9, 0x80000001, 0x4, 0xf2, 0x5451, 0x10001, 0x2, 0x3b95d2d2, 0x401, 0xffffffffffffff81, 0x4, 0x3, 0x2, 0x0, 0x80, 0x0, @perf_bp={&(0x7f0000000140), 0x1}, 0x2, 0x2, 0x101, 0x5, 0x4, 0x1, 0xfe}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockname$netlink(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0xc) 16:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xffffffe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) write$cgroup_subtree(r1, &(0x7f0000000180)={[{0x2f, 'memory'}]}, 0x8) write$input_event(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) writev(r2, &(0x7f0000001380)=[{&(0x7f0000000000)="e11c2fae0b9f0e448dd25676d7703579c24d8274d3e759c45d49a9f94b35b59a3f8c9635712819fadaf4a9d6379c25b5d53babf2bc380a7fa1383b191046dd8c580b8651f61e5ff32a174a500a4feae003a89cfc866de7b6fe79155e5bf0f3f59ae7c6e65952f42b327af8f9f953732d5d280a3ba3ac59f35c09f9f873b6d7d175ce3a572b4b9458024cc9e0818e44ea447ef5489feb25027115bce40c87", 0x9e}, {&(0x7f00000000c0)="714bc1f71c32fc535d190716621cb6b09bb6384aa30106493425b09d851cb897bf9e406808eaebda0321456877acfab21ec48d4570", 0x35}, {&(0x7f0000000200)="591c9bacaa135bedd13cf4adc5687383e829577014f4d9b5330489310ff1b1015d4abb863452b82aec4e6b31e6ba645e38050eb8f17a31d9a009223854a70c60c36421f70a485474f0d5058aeb75293fe0215d84a9e3fef02493c7422d5059adcf9652a3ed00dcad446b37dd03be602628c15e52fb759da6ab55df83eba02b8666b7c5ca898590af26677c361713c84388bebce2f1c0a14d28b94b3d7c4a1ec4707652fd42cbfd", 0xa7}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="959a3ba8b203f20eea7fe52ad695187c04143ce1fe478f574617c38ca348fe7a3a70108f0d4fb3299c4938ee716a4cd8feb73ecf55f032f5ea70f96084a42f101cefcfbb4cde69a7f3caab8f47e1e2b9ed5a8bb2c8c9b5de1f40844a0dbf73a2989d010f134c0df006b8d9e20f40e6a6bd13c932511e87710b105e50d1daf0c0bcb277fa832aa92dc39ab0e74a49972cac9dd088237777086482124d38672c", 0x9f}], 0x5) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:51 executing program 3: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000100)={0x7fffffff, 0x10000, 0x4440}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = open(&(0x7f0000000040)='./file0\x00', 0x302, 0x8) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000080)={0x2, 0x4e21, @loopback}, 0x10) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x100, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:51 executing program 4: r0 = syz_open_dev$midi(&(0x7f0000000180)='/dev/midi#\x00', 0x13, 0x4002) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000200)={&(0x7f00000000c0)=[0x801, 0x1, 0xfffffffffffffff9, 0x8000000000005, 0x2, 0x3f, 0xfffffffffffffffe, 0x2, 0x4], 0xbb, 0x0, 0x1, 0x1000, 0x5, 0xe4, {0x5, 0x5, 0xc2, 0xfff, 0x2, 0x6, 0xfff, 0x7, 0x8, 0x3, 0x3, 0xb13, 0x5c, 0xfffffffffffffffe, "ea592efaaf31e0fadb39a8080eb684afd1f67a0d1a2bb949680348a800"}}) write$selinux_access(r2, &(0x7f0000000040)=ANY=[@ANYBLOB="73797374656d5f753a6f626a65638ca11c537070705f646576a3fe99357c3753424991514c1c6963655f743a733020756e636f6e662408000020303030303030383081303030303030303030303800"], 0x42) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x6000000, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 5: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x7, 0x31, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) mmap(&(0x7f0000502000/0x4000)=nil, 0x4000, 0x0, 0x10013, r0, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @dev, @local}, &(0x7f0000000140)=0xc) mbind(&(0x7f0000012000/0xc00000)=nil, 0xc00000, 0x1, &(0x7f00000000c0), 0x1, 0x2000000000002) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 310.480786] mmap: syz-executor5 (12405) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. 16:14:51 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$vicodec0(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video36\x00', 0x2, 0x0) ioctl$VIDIOC_SUBDEV_G_CROP(r1, 0xc038563b, &(0x7f0000000080)={0x1, 0x5, {0x4, 0x9, 0x1, 0x5}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x700, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:51 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) readahead(r0, 0xfffffffffffffffb, 0xac8c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dlm_plock\x00', 0x20000, 0x0) symlinkat(&(0x7f0000000040)='./file0\x00', r1, &(0x7f00000000c0)='./file0\x00') r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$INOTIFY_IOC_SETNEXTWD(r2, 0x40044900, 0x3) ioctl$DMA_BUF_IOCTL_SYNC(r2, 0x40086200, &(0x7f0000000000)=0x1) ioctl$TUNSETNOCSUM(r1, 0x400454c8, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast2}}, {{@in6=@ipv4={[], [], @multicast1}}, 0x0, @in=@dev}}, &(0x7f0000000080)=0xe8) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r1, 0x8008ae9d, &(0x7f0000000300)=""/173) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000000)) 16:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x1, 0x18002) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0x200000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x600, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) mknod(&(0x7f0000000000)='./file0\x00', 0x8240, 0x20) r1 = syz_open_dev$vcsa(&(0x7f0000000080)='/dev/vcsa#\x00', 0x5, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffff9c, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x5}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000180)=@sack_info={r2, 0x4, 0x4}, &(0x7f0000000200)=0xc) setsockopt$sock_timeval(r1, 0x1, 0x15, &(0x7f0000000240)={0x77359400}, 0x10) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) fdatasync(r3) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = creat(&(0x7f0000000000)='./file0\x00', 0x10) setsockopt$IP_VS_SO_SET_FLUSH(r1, 0x0, 0x485, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0xe7, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x9, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000180)={{&(0x7f0000000000)=""/219, 0xdb}, &(0x7f0000000100), 0x3}, 0x20) ioctl$DRM_IOCTL_RES_CTX(r1, 0xc0106426, &(0x7f0000000240)={0x1, &(0x7f0000000200)=[{0x0}]}) ioctl$DRM_IOCTL_DMA(r1, 0xc0406429, &(0x7f0000000380)={r3, 0x3, &(0x7f0000000280)=[0x1, 0x72, 0x4], &(0x7f00000002c0)=[0x3ff, 0x7, 0x431, 0x5, 0xffffffffffffffc1, 0x9, 0xffffffffffffffc0, 0x5], 0x10, 0x6, 0x3, &(0x7f0000000300)=[0x1, 0x4, 0x100000000, 0x0, 0x3, 0x5], &(0x7f0000000340)=[0x9f1, 0x3, 0x8001, 0x5, 0x8001]}) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = accept(0xffffffffffffff9c, 0x0, &(0x7f0000000000)) r1 = getpid() ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000000040)=0x0) r3 = syz_open_dev$ndb(&(0x7f0000000080)='/dev/nbd#\x00', 0x0, 0x0) r4 = eventfd2(0x8, 0x1) r5 = getuid() getresuid(&(0x7f00000000c0), &(0x7f0000000100)=0x0, &(0x7f0000000180)) sendmsg$netlink(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000200)={0x6e8, 0x1d, 0x723, 0x70bd2a, 0x25dfdbff, "", [@typed={0xf0, 0x70, @binary="3776ac4fc6d6b80ab950d420abd68fd2dd60c70b92f493e89210b4a7e825383322b950ab28b46719621204682b69c808c90c8de4c430984ae5c84741c969bd911dfa059415e1aead23543682e4845bc7edd0b7b4fdc7379fd08301f787babbde376eded97f51fc6eabc0726ec0c92651fcbf6f09cb2b5407b8ecc9f15e5a0f08c716307f716ace0d3b5b8d0abb4a5d885d18bdfe094b75f1e3081a0b2c9b38191da05e43a4f338cdda191b5669dad32a0e2efecbc279421e20193aca8dfda56ae09d1ea8108bf74b6ef31630c4f257e377846333b52d7ed5e48dee66dde953fcf9e57117f94a2b023efd"}, @nested={0x250, 0x4e, [@generic="dfba750741211733d0cc0d32b69e57ac9660cb051488c9ab38fbe063a4e2de88fa306dba1108655ad2d6107c25e4ed5f5ddbbd380d1c544721e2a70f50234113b96d92ebc2a77771e0dbc599ad452223bec36a17e30a10a29909f081880ad508ce3526d60b514c77446d0080622d4f3b0fa44f8933408172f2f9d2f465ee78bc6989045892a25df9bdae3c30a6398c196d84f7fbefe839a80fd8f4159b93df7f03687b00bbf3f1fb252dd52d079d1240eed4138d6e", @generic="768123c2ed5c5fe28950510f462a2c1af20608ec872d279da2e78b2aaa5880eaed27727245a93d6c9f4f21757fca33b6bb4c4bdfe97c6d983d3e06d61ed7cb0f2e414efcbdb9419bf230b3d5b23683fda6301b158d28ca6a1fe805ccd77e5dd41f74e4704ffb6416ceb61782dd3fb2f7c798e6ed63fb984cec8d40e6ae3f1091bc13a44171cdb8cc2eb890395b5fd3ce0c61fea70d3b5e11319002279e4468f2dbfb6e670bbd371ac4e4230b5e8baefada10b540485ec3e0c21f0a4781e2e01f55a5350c1256c038cd1f58f7725978b594", @typed={0x8, 0x19, @pid=r1}, @generic="c3ca3c20f4d7d2d7fe35cb39c558a6cac50ade882a7c428da2589efde53f4fb8e8f6e58a2aced5b21072d60a1528c07309e560fc413f58cd8d49c3c0cf10517d16b17612b8b3822f568eb17d88056889b10357f1e3b0774ba8fadc2b30ca28bc14d40a49e8", @typed={0xc, 0x0, @u64=0x7f}, @typed={0x8, 0x71, @pid=r2}, @typed={0x8, 0x63, @fd=r3}, @typed={0x8, 0x51, @fd=r4}, @typed={0x8, 0x27, @uid=r5}, @generic="763ef399b7df10dd603d8152f13dcca7974348b57839bee82d24056369cd7a8fea37932836e6f5ba735a2326"]}, @typed={0xb8, 0x32, @binary="f565215af0ffb61d138b576613c7a099973cba9aa15e2d0fffb1675015fb6e4b418963e96517fa919a684dae43d5fb40d3b58b6692008510c2c92ea94e31b79426e97647b87a09e45760fb094b969bb36ddbd9c5eabafbc15792a255632d090e2c52e21d4b45ccefb34d8aa065c1ad7862a519f285c32f7bb323fb981f22c64deae90111e7fa75e0348fd2c716978b87674f918dedff937a5fc71b92356ba7fcb414c2b714ffa40dcf1663cd28dbbf10ee28"}, @nested={0x17c, 0x5a, [@typed={0x8, 0x8d, @u32=0x5}, @typed={0x8, 0x6e, @uid=r6}, @typed={0x14, 0x42, @ipv6=@dev={0xfe, 0x80, [], 0x14}}, @generic="8a97ada3597d1f6a7a38849112c7774620fd7fdba8d756bc73d24a5215885a6078f8c699a79328a8cce4d6a4c5b3c5e795acfb96e3c8d6ff6f5e9f02d805957dee4947aff06fa79d31bf75be73ac39f1cfd65089f6d3c455e1472fcc10b08b2f510c395bf5899e79b2d704af576e63c44c305eb759f6df404c1a3de5002652ce93cdd86873d7f51d1cca257e864ff90b8c7282402e446fc750d2d45221e0d76fdaae44cf742c", @generic="85520a9ae8f0d70b946dc84cd3cc46cd20c42287eaa386e8beae2b267a6a962efa9b8093ecd290647114461a1288ae09f08cdcd368173a379927ed03121a8770a4fc064852559075d390ee6b3ff3668accf636c940b77e25a2343f12caf3d034484a48a1cf44e56d3f544031da58121afffa51d959970edc8e497bf64b68d02aa34bc6f9da20ed6d049b4b55e14f2062d7114de2b84c7dc7a58a5bd3651ac83d3c05364621bb0eb7ad3274d3f5"]}, @typed={0xc, 0x42, @u64=0x2}, @generic="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", @typed={0x4, 0x5a}, @generic="f46e57a1399b3ad56d7d5d448d9143c110c0a8e019eede8e55396d6a280fdb52cbb0597a4fe129fbc46af04fa4abcb930f09608346acfa7620af2575a71f67bbf4cb9ce91ee16b15263d08e0ab", @typed={0x4, 0x87}, @typed={0x8, 0x79, @u32=0x3}]}, 0x6e8}], 0x1, 0x0, 0x0, 0x801}, 0x40001) r7 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r7, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:52 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140203, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r0, 0xc0045540, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 3: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x2a0201, 0x0) bind$nfc_llcp(r0, &(0x7f00000000c0)={0x27, 0xffff, 0x0, 0x7, 0x1, 0x6, "62406b3787fbed874fd57e48ece8ffed40bccb6d3aaa348e07849f35cd88c0ffe2e680327230277c6bfa3ef9f7fc5afdc72451cd4afb66cd2fee3300b5dcea", 0x10}, 0x60) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socket$vsock_dgram(0x28, 0x2, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x140202, 0x0) fadvise64(r1, 0x0, 0x7, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 4: r0 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000180)='/dev/sequencer2\x00', 0x2000, 0x0) connect$llc(r0, &(0x7f0000000200)={0x1a, 0x8, 0x0, 0x0, 0x28, 0x1, @remote}, 0x10) syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x0, 0x2) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x7, 0x800) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000080)='/dev/hwrng\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x5, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000100)='/dev/snd/controlC#\x00', 0xfffffffffffffffc, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000240)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000080)='/dev/full\x00', 0x400, 0x0) ioctl$SCSI_IOCTL_SEND_COMMAND(r1, 0x1, &(0x7f00000000c0)={0x39, 0x4, 0x6, "0664bf699971d1bfdaf8d97774b8c3a9c409498dbc3a519a78d79bfac501ff27def3f19c92fffdd04a6d0d06f868c3b965e94f60965fa20878"}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:52 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:52 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={0x0, 0xffffffffffffffff, 0x0, 0xb, &(0x7f0000000080)='/dev/audio\x00', 0xffffffffffffffff}, 0x30) r1 = add_key$user(&(0x7f0000000180)='user\x00', &(0x7f0000000200)={'syz', 0x2}, &(0x7f0000000240)="bef6ee402eca8c24f979e467704301576380d6c9d9bd8e7882c633717b053e1fba5de72f93edfdaff6ab9865936da1a9e6381300", 0x34, 0xffffffffffffffff) keyctl$invalidate(0x15, r1) fcntl$getown(r0, 0x9) r2 = openat$null(0xffffffffffffff9c, &(0x7f0000000280)='/dev/null\x00', 0x40000, 0x0) sendmmsg$inet_sctp(r2, &(0x7f0000001680)=[{&(0x7f00000002c0)=@in6={0xa, 0x4e20, 0x1, @ipv4={[], [], @multicast1}, 0x674}, 0x1c, &(0x7f0000001340)=[{&(0x7f0000000300)="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", 0x1000}], 0x0, &(0x7f0000001740)=ANY=[@ANYBLOB="18000000000000008400000007000000e0000002000000001800000000000000840000c759000000bf0000010000000018000000000000008400000000000000010007000300080018000000000000008400000006000000f4780000000000009ef2a6c9e1554ebb365deaa2771276456f8b6110194b888e944ac86cd2455f30aba8f07926825933309e23d17195890fd2df21cc3003ac14048400571442107fa1a07fc3ae1c0a4540b42d57e7933b06bfd94d302b5f2a3d95fb77a898d289f45fdb7df729dfa5d6d22c8e15ba413a54c069689d1a18cf745bbe672da9ef353e9d5e960367c6609ca6eed5f2"], 0x60, 0x804}, {&(0x7f0000001700)=@in6={0xa, 0x4e23, 0x1d, @mcast1, 0xfff}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001400)="6113fc59081c82913169c40ae54c28e44cd0b26ad47abb72c6dfe0fc284607ab8ded7968aba692cb3a38d6b634c66af36c4e5d044f7b2ceb36b0d728e544cc5933a639bb4a800b15f4147538d988e4143b6d50f91fb383cbd88dc683096d9e0940b59eef41c59b0aafc8ae63faede3fed0de02b8fa82ebb47d3a0554691fbe0db83bbb579c855cb58edb42bfba76e225b85bbf927fd6c3011f6d96bfa17d4def34d198a4cbf345a59e86c5f743820e7d21b7b124954ae1f65083743ad45570f76d95cee146848a427bb9be23c036e461df0784e2b1cc197a9eb6ce71a3828c955ebbd8cb6fff2b35b1e4b590560c", 0xee}, {&(0x7f0000001500)="7dbb57d61dcb08158ae25db8e75ef3c83b75a08bd7374c38626271e0b364ff44fb400d1d81037adbe87b47631b78587a3b4b97b22cd7a4cb4c7202fd5ba950535a4315b5bb15ae2291fd706b7d88e1dd353bca64c989138a4c8a48a289d8ef0715a4d16bc4c2fdd74ae94498c7e4f0b84dbfffe4595f96d2132afb07afde88bc16e2d1551d66", 0x86}], 0x2, &(0x7f0000001600)=[@authinfo={0x18, 0x84, 0x6, {0x1}}, @init={0x18, 0x84, 0x0, {0xfff, 0x1, 0x1, 0x8000}}, @authinfo={0x18, 0x84, 0x6, {0x101}}], 0x48, 0x80}], 0x2, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000000100)=0x0) r4 = getpgrp(r3) migrate_pages(r4, 0x80000000, &(0x7f0000000000)=0x4, &(0x7f0000000040)=0x9) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) dup2(r0, r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x4001) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x100, 0x0) write$input_event(r2, 0x0, 0xffffffdd) getsockopt$IP_VS_SO_GET_DESTS(r2, 0x0, 0x484, &(0x7f0000000080)=""/83, &(0x7f0000000100)=0x53) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f0000000200)=0xc) fcntl$setown(r0, 0x8, r3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x2, 0x200) getsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000000c0)={0x0, 0x9}, &(0x7f0000000100)=0x8) ioctl$KDGKBENT(r1, 0x4b46, &(0x7f0000000200)={0x2, 0x1, 0x5}) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000180)={r2, 0x2}, 0x8) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000240)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffc, 0xbcc6ab3d08d91a0c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:53 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) r2 = getpgid(0x0) move_pages(r2, 0x9, &(0x7f0000000000)=[&(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil], &(0x7f0000000080)=[0x2], &(0x7f00000000c0)=[0x0, 0x0], 0x4) 16:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x80000000) openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SG_GET_SG_TABLESIZE(r1, 0x227f, &(0x7f0000000040)) 16:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x4) r1 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x1, 0x2) write$P9_RAUTH(r1, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x2, 0x4, 0x7}}, 0x14) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x8, 0x4, 0xdc9}) 16:14:53 executing program 4: openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) dup2(0xffffffffffffff9c, 0xffffffffffffffff) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x600100, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x23) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$DRM_IOCTL_AGP_RELEASE(r2, 0x6431) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$KVM_GET_SREGS(r1, 0x8138ae83, &(0x7f0000000000)) 16:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x400100000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r1 = syz_open_dev$usbmon(&(0x7f00000000c0)='/dev/usbmon#\x00', 0x3, 0x2) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000100)) mkdir(&(0x7f0000000000)='./file0\x00', 0x12) getsockopt$inet_mreq(r0, 0x0, 0x20, &(0x7f0000000040)={@multicast1, @loopback}, &(0x7f0000000080)=0x8) 16:14:53 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x4001000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x4001000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x4002, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:53 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000050000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:53 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0xffffffffffffff00, 0x200000) ioctl$KDSETMODE(r1, 0x4b3a, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x140201, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TIOCGPGRP(r2, 0x540f, &(0x7f0000000040)=0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_REPLACE(r1, 0xc1105518, &(0x7f0000000200)={{0x0, 0x6, 0x40, 0x8}, 0x2, 0x3, 0xffffffffffffffd9, r3, 0x5, 0x7ff, 'syz1\x00', &(0x7f0000000080)=['\x00', '\\vboxnet1(vboxnet0/}\x00', '/dev/dsp#\x00', 'wlan1\x00', '\x00'], 0x27, [], [0x4, 0xffffffffffffcc01, 0xd7, 0x8]}) 16:14:53 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:53 executing program 4: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x3, 0x80040) write$input_event(r1, 0x0, 0xfffffffffffffeed) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x400100000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000100)={0x0, 0x18, 0xfa00, {0x0, &(0x7f00000000c0), 0x13f, 0x3}}, 0x20) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x8, @mcast2}, 0x1c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$EVIOCSKEYCODE_V2(r2, 0x40284504, &(0x7f0000000080)={0x8, 0x1e, 0x100000000, 0x2, "5a6583a30e3855498786d756b08a21d33b2bd244ce0bf0aae1808e0ebba4c6d2"}) 16:14:54 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x100000000140201, 0x0) ioctl$SNDRV_TIMER_IOCTL_TREAD(r1, 0x40045402, &(0x7f0000000000)=0x1) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r2, 0x54a0) sendfile(r1, r2, &(0x7f0000000040), 0x4e) 16:14:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x2000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x3, 0x405) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x101, 0x8000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x6, 0x2080) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0xffffffffffffffff, 0x0, 0x7, 0x0, 0xfffffffffffeffff}}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x3f, 0x440) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x2000003) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2, 0x406) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) r2 = add_key$user(&(0x7f00000000c0)='user\x00', &(0x7f0000000100)={'syz', 0x2}, &(0x7f0000000200)="0751fc0c979c364e0ca37c696699728cb531215f7b01de80a453d211d25a70b2759db19b9e3a6f82e4953a943388a4b47562e70258a8fe98885a7cf43d8d104286c8f2ea2e919427662045d03cd1c3b94fcdcd815fa6eed55ff07e78f027b8bea2c023aee49cfe08fa64ac33079dfbd9be88724977d868d72a5043efbcdf55ceaaafeabb1db43e16d075c0a7b939c5b0b980e0f7d6f905181521e37db1f5b4018861fa73e7b740b7245330f2759ced91c5050b4f93c0cde07fef99afdad12c1f7d3a581ae747f8e791937481b20df9b7bd2abdbf12101799f7c6f787960b04bc0f9f45dbb57eafd9ab4dcd42d1223c81a8da6b", 0xf3, 0xfffffffffffffffd) r3 = request_key(&(0x7f0000000180)='cifs.spnego\x00', &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000340)='&mime_typecpuset\x00', 0xffffffffffffffff) keyctl$unlink(0x9, r2, r3) r4 = fcntl$getown(r1, 0x9) perf_event_open(&(0x7f0000000040)={0x5, 0x70, 0x4, 0x3ff, 0x3, 0x10000, 0x0, 0x101, 0x201, 0x8, 0x401, 0x1195, 0x7, 0x6, 0x8, 0xfffffffffffeffff, 0x2, 0x8, 0x1ff, 0xb10f, 0x9b47, 0x9, 0x4, 0x20, 0x6, 0x3, 0x1ff, 0xff, 0x8, 0x8000, 0x4, 0x8, 0xf66, 0x0, 0x7f, 0x0, 0x7e000000000, 0x0, 0x0, 0x1, 0x6, @perf_bp={&(0x7f0000000000), 0x1}, 0x4400, 0xfe5, 0xf00e, 0xf, 0xba, 0x9, 0x4}, r4, 0x6, r1, 0x2) ioctl$FS_IOC_GETFLAGS(r1, 0x80086601, &(0x7f0000000380)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/context\x00', 0x2, 0x0) 16:14:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x8000, 0x0) r2 = getpgrp(0xffffffffffffffff) getresuid(&(0x7f0000000180), &(0x7f0000000200), &(0x7f0000000240)=0x0) lstat(&(0x7f0000000280)='./file0\x00', &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000540)=0x0) lstat(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000640)=[0xee01, 0xee01, 0xffffffffffffffff, 0xee00, 0xffffffffffffffff, 0x0]) r8 = getpgrp(0xffffffffffffffff) r9 = geteuid() getresgid(&(0x7f0000000680)=0x0, &(0x7f00000006c0), &(0x7f0000000700)) r11 = getpgrp(0xffffffffffffffff) stat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r14 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000008c0)={{{@in6=@local, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4}}, &(0x7f00000009c0)=0xe8) r16 = getegid() sendmmsg$unix(r1, &(0x7f0000000b00)=[{&(0x7f0000000080)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000140)=[{&(0x7f0000000100)="64ad18", 0x3}], 0x1, &(0x7f0000000340)=[@rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x48, 0x40080}, {&(0x7f00000003c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000500)=[{&(0x7f0000000440)="6ddd8dd39b0bc18aa71a1e2d96d03e244963dd103fbf690126751a0f1edbb893360ddaca00980eb24ee37efde90b199c20f7dfef86e67859fb201d09f18f4a99736e90dda59e706c28bdf6eb17de277b7fe5a758afcf4c05b4d0e36682592814c6517598680987b0ad160df33314c1b5d1011e9772877c29a15726114278366a9d066a43ec78ae92c27541f3c4a7ad07c4712147899bdf85f4623c24f71fd7dcb66824274a3716b13e8ab186bd9caa7d", 0xb0}], 0x1, &(0x7f0000000a00)=[@rights={0x30, 0x1, 0x1, [r0, r0, r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r5, r6, r7}, @cred={0x20, 0x1, 0x2, r8, r9, r10}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0]}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r11, r12, r13}, @cred={0x20, 0x1, 0x2, r14, r15, r16}], 0x100, 0x4011}], 0x2, 0x20000044) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cpuacct.usage_percpu\x00', 0x0, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/zero\x00', 0x40, 0x0) renameat2(r1, &(0x7f0000000080)='./file0\x00', r2, &(0x7f0000000100)='./file0\x00', 0x3) r3 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/enforce\x00', 0x4000, 0x0) ioctl$UI_SET_FFBIT(r3, 0x4004556b, 0x7a) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000180)='/dev/snd/controlC#\x00', 0x0, 0x400000) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x4000000000208000, 0x0) ioctl$VIDIOC_QUERY_EXT_CTRL(r1, 0xc0e85667, &(0x7f0000000040)={0x40000000, 0x10f, "7a341a776fca08665f6f706eabd30462ee356f126002a17cda8a6d1094299c91", 0xfffffffffffffff8, 0xddd, 0xfffffffffffff801, 0xfe6, 0x80000000, 0x1f, 0x10000, 0x10000, [0x3, 0x9e2, 0x101, 0x6c3d]}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000340)='/proc/self/net/pfkey\x00', 0xc02, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = request_key(&(0x7f0000000240)='.request_key_auth\x00', &(0x7f0000000280)={'syz', 0x0}, &(0x7f00000002c0)='Q$\x00', 0xfffffffffffffff9) keyctl$describe(0x6, r3, &(0x7f0000000300)=""/59, 0x3b) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r2, 0x10e, 0x5, &(0x7f0000000200)=0x4, 0x4) 16:14:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:54 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000200)='/dev/audio\x00', 0x4000000000020800, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_ENUMAUDIO(r1, 0xc0345641, &(0x7f0000000000)={0x5, "2d05fa8bf2a357f3860aa6c4498a33e513213240116212d68ff5531e043e8529", 0x2}) 16:14:54 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0xac, &(0x7f0000000340)=[@in6={0xa, 0x4e20, 0x2, @remote, 0x2}, @in6={0xa, 0x4e21, 0x2, @loopback, 0xfffffffffffffffd}, @in6={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x10}, 0x9}, @in6={0xa, 0x4e20, 0xffffffffffff1bf0, @dev={0xfe, 0x80, [], 0x20}, 0x8000}, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1a}}, @in={0x2, 0x4e22, @multicast1}, @in6={0xa, 0x4e21, 0x5, @mcast2, 0x3}]}, &(0x7f00000000c0)=0x10) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000400)={r3, @in6={{0xa, 0x4e23, 0x28, @dev={0xfe, 0x80, [], 0xa}, 0x8}}}, 0x84) r4 = add_key$keyring(&(0x7f0000000100)='keyring\x00', &(0x7f0000000180)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffff9) r5 = add_key(&(0x7f0000000680)='trusted\x00', &(0x7f0000000640)={'syz', 0x3}, &(0x7f0000000600)="3649c8a4e833bd043a331088e44404dba7be7c0af7ea30dd14fd6f581df6c82d340dd68d", 0xffffff1e, 0xfffffffffffffff8) keyctl$reject(0x13, r4, 0xc4, 0x3, r5) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000200)={{0x3, 0x1, 0x1, 0x1, 'syz0\x00', 0x5}, 0x2, 0x10000006, 0xffffffffffff73e5, 0x0, 0x3, 0x100000001, 'syz1\x00', &(0x7f0000000040)=['/dev/audio\x00', '/dev/snd/pcmC#D#p\x00', '/dev/snd/controlC#\x00'], 0x30, [], [0x4, 0x7884f65c, 0x1, 0xffffffffffffffc0]}) 16:14:54 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x400, 0x0) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$DRM_IOCTL_ADD_BUFS(r1, 0xc0206416, &(0x7f0000000000)={0x2, 0x2, 0x0, 0x3, 0x7, 0x7}) shutdown(r2, 0x0) 16:14:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x29, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3524) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x165fb6eb, 0x280980) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$RTC_WIE_OFF(r2, 0x7010) 16:14:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x400100000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x40) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r3 = dup(r2) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000200)={0x4, {{0x2, 0x4e24, @remote}}, {{0x2, 0x4e22}}}, 0x108) write$P9_RREAD(r3, &(0x7f0000000040)={0xbd, 0x75, 0x1, {0xb2, "2905b578ff8bba38050083ae0f54a7534b4f93323fe8e556a4ffe4fd82f8a3512066df67da49a58acdd14b6fc6a355136da3804242fb3e0ea0744d9414429cc870f3fcb66a5dfefcfa5ed4b1bc9a132a724bf54f3695cda85548b83bb7389758f96ca12e9bb36eaa7b200eaf491d49f3bdf1866ca978770eb375cfdd003f98e87cf71e099e1f731f221eb4c3b574540ea0a30254c7a7bfbf0381616392435df89adadca60ddf50c5c2825572d84ef802208b"}}, 0xbd) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 4: r0 = syz_open_dev$mice(&(0x7f0000000000)='/dev/input/mice\x00', 0x0, 0x80) getsockopt$bt_l2cap_L2CAP_CONNINFO(r0, 0x6, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x6) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x4001000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 5: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f0000000080)=0x1000000003) r0 = syz_open_dev$vcsa(&(0x7f0000000000)='/dev/vcsa#\x00', 0x6, 0x10000) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r0, 0x84, 0xf, &(0x7f0000000180)={0x0, @in6={{0xa, 0x4e22, 0x8686, @local, 0x80}}, 0x10001, 0x40, 0x9, 0x1, 0x3}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000240)={r1, @in6={{0xa, 0x4e21, 0x0, @loopback, 0x4}}, 0x71662974, 0x8}, &(0x7f0000000100)=0x90) setsockopt$inet_sctp_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0x101, 0x800, 0x3, 0xfffffffffffffff7}, 0x8) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r1, 0x6611) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000000)={0x0}, &(0x7f0000000040)=0xc) setpriority(0x2, r2, 0x4d7) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x300, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x2000100000000, 0x420000) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r1, 0xc0a85352, &(0x7f0000000080)={{0xff, 0xf1a8}, 'port1\x00', 0x2, 0x1, 0x4, 0x0, 0x2, 0x20, 0xfffffffffffffffe, 0x0, 0x4, 0x28df}) modify_ldt$read(0x0, &(0x7f0000000200)=""/233, 0xe9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:55 executing program 4: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x4b, 0x140) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r2 = dup3(r1, r1, 0x80000) ioctl$TIOCSLCKTRMIOS(r2, 0x5457, &(0x7f0000000000)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_subtree(r1, &(0x7f0000000040)='cgroup.subtree_control\x00', 0x2, 0x0) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x4000000000, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$binfmt_elf32(r0, &(0x7f0000000200)={{0x7f, 0x45, 0x4c, 0x46, 0x6, 0x3, 0x0, 0x3, 0x10000, 0x3, 0x6, 0x100000000, 0x106, 0x38, 0x204, 0x10001, 0xfffffffffffffff7, 0x20, 0x1, 0xffff, 0x7, 0x670}, [{0x7, 0x8001, 0x1, 0x9, 0x7da9, 0x581d6d64, 0x100000000, 0x7ff}, {0x6474e551, 0x8e, 0x9, 0x401, 0x80, 0x5, 0x9, 0xfffffffffffffff8}], "702bc3ca586ef2fa61448c97f20e631a0a143620f935be83750c13f35704a3838162ea6f7a16fb4f1e35611d60adbdb1e0aa64495e8d0687b730af44a93d71260ed6322ea9d697f6937b9cfa125ab68e7870e11617cd676d6c9add830a1edd93dd49d780927f2d0493d614df24f62726441bd67f7a365c38857e48d940ebb351f421268404d2ea48d0b3059b8828da492c0d2beb37ac0bcd8865cc4ed30ae55298fec6e5fee13cdfa77b92c634d815717be4ac310002323bba62dd1d01338d701d6ce42c8a677ee304940abb9517a5ffc9efc3c04599a50e826390d05ca37d28d74c4eae6089c3ac6361686024519cfa4aef", [[], [], [], [], []]}, 0x66a) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0xffffffffffffee48, 0x200) 16:14:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x700, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/checkreqprot\x00', 0x101100, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair(0x2, 0x1, 0x2, &(0x7f0000000080)={0xffffffffffffffff}) write$uinput_user_dev(r1, &(0x7f0000000200)={'syz1\x00', {0x0, 0x0, 0xffffffffffffffc0, 0x6}, 0x14, [0x8, 0xf3, 0x4, 0x1, 0x0, 0x80, 0x100000000, 0x3, 0x4a0d, 0x2, 0x3, 0x0, 0x1, 0x946, 0x80000000, 0x8000, 0x3c0eabc8, 0x10000, 0x1, 0x6, 0xfc000000, 0x169, 0x7, 0x3, 0x3f, 0xdd04, 0x0, 0x3, 0xfffffffffffffffc, 0x4bd, 0x400, 0x0, 0x1, 0x40, 0xfffffffffffffff8, 0x9, 0x800, 0x9, 0xffffffffffffc0f0, 0x1000, 0x9, 0x7, 0x0, 0xb4, 0x0, 0x4, 0x6, 0x1, 0xdb40, 0x1, 0x9, 0x2, 0x8, 0x10001, 0xfffffffffffffff7, 0xaec7, 0x6, 0xb62f7aa, 0x7, 0x5, 0x80000000, 0x6f, 0xffffffffffffffff, 0x9d], [0x7, 0x2d4000000, 0x8001, 0x93, 0x7, 0x1cf, 0x6, 0x2800000, 0x1b66, 0x7, 0xffffffffc957b519, 0x7ff, 0x4, 0x100000000, 0x9, 0x0, 0x4, 0x2, 0x2, 0xfffffffffffff9fd, 0x10000, 0xffffffffffff8001, 0x0, 0x828, 0x3, 0xfff, 0x6b, 0x81, 0x93, 0xd3, 0xfffffffffffffffe, 0x2c, 0x4, 0x1, 0x80, 0x80000001, 0x0, 0xd7a2, 0x7, 0x401, 0x5, 0x6, 0xd143, 0x8, 0x4, 0x0, 0x26ab, 0x1, 0x1000, 0x8, 0x3f, 0x80000001, 0x400, 0xfffffffffffffffd, 0x4, 0x59e, 0x100000001, 0xde, 0x876, 0x7ff, 0x3, 0x100, 0x6, 0x3], [0x5, 0x0, 0xffffffffffff8001, 0x0, 0x7, 0x5, 0x6, 0x7, 0x101, 0x8, 0x800, 0x80000000, 0x5, 0x0, 0x1f, 0x80, 0x1000, 0x7ee, 0x100000001, 0x7, 0x6205, 0x6000000000, 0x100000000, 0x1f, 0x1000, 0x101, 0xc55, 0x7f, 0x0, 0x0, 0x1, 0x100, 0x6, 0xace3, 0x469d, 0x5, 0x3, 0x3f, 0x6, 0x8, 0xa6, 0x3, 0x0, 0x0, 0x5, 0x9, 0x232c, 0x360, 0x36, 0x34, 0x63, 0x6, 0x0, 0x3, 0x5, 0x10000, 0x5, 0x5, 0x3, 0x3f, 0x7, 0x0, 0xaf, 0x1], [0x401, 0x7, 0x80000000, 0x80008000000, 0x7f, 0xcd5, 0x9, 0xffffffffffffff7f, 0xffffffffffffa2b4, 0x400, 0x1ff, 0x0, 0x40, 0x46ea7d77, 0x0, 0xb259, 0x4, 0x8, 0xaf9, 0x7, 0x3aa, 0x10001, 0x6, 0x600c, 0xffff, 0x7, 0x9, 0x2, 0x0, 0x8, 0x8, 0x80, 0x3, 0x1376, 0x10e00000000000, 0x9, 0x0, 0x5, 0xc0, 0x44c4, 0x10001, 0x4, 0x13d240ca, 0x9, 0x40, 0x1, 0xcf1, 0x100000000, 0x1, 0x2, 0xffff, 0x2, 0x5, 0xf3db, 0x6, 0x40, 0x1, 0x681aa250, 0x1, 0xffff, 0x9, 0xfff, 0x4, 0x7fff]}, 0x45c) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) r5 = getpid() ioctl$VIDIOC_S_SELECTION(r3, 0xc040565f, &(0x7f00000000c0)={0xf, 0x103, 0x0, {0x2, 0x5, 0x800}}) kcmp$KCMP_EPOLL_TFD(r4, r5, 0x7, r2, &(0x7f0000000040)={r3, r3, 0x7}) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) dup3(r0, r0, 0x80000) openat$audio(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/audio\x00', 0x80000100101a00, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) prctl$PR_GET_SECCOMP(0x15) 16:14:55 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:55 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) arch_prctl$ARCH_GET_GS(0x1004, &(0x7f0000000000)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) prctl$PR_SET_THP_DISABLE(0x29, 0x0) 16:14:55 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x8000, 0x0) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2240040}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x58, r2, 0x4, 0x70bd27, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_DEST={0x34, 0x2, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv6=@mcast1}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x7}, @IPVS_DEST_ATTR_ADDR={0x14}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$sndtimer(&(0x7f0000000000)='/dev/snd/timer\x00', 0x0, 0x280040) 16:14:56 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 3: r0 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$VIDIOC_S_DV_TIMINGS(r2, 0xc0845657, &(0x7f0000000040)={0x0, @reserved}) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x4001000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x802, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:56 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 5: r0 = syz_open_dev$video4linux(&(0x7f0000000080)='/dev/v4l-subdev#\x00', 0x7, 0x2000) signalfd4(r0, &(0x7f00000000c0)={0xddf}, 0x8, 0x80800) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x10000, 0x82) socketpair(0x3, 0x5, 0x1f, &(0x7f0000000040)) write$input_event(r2, 0x0, 0x0) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_RAWMIDI_IOCTL_DRAIN(r3, 0x40045731, &(0x7f0000000100)) 16:14:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DESTROY_ID(r1, 0xffffffffffffffff, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) syz_open_dev$mice(&(0x7f0000000180)='/dev/input/mice\x00', 0x0, 0x10000) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140202, 0x0) r3 = syz_open_dev$sndpcmp(&(0x7f0000000340)='/dev/snd/pcmC#D#p\x00', 0x10000, 0x405) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, [], 0x1b}, 0x6}}, 0x5, 0x7, 0x9, 0xc4, 0x3}, &(0x7f0000000140)=0x98) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000200)={r4, 0xffffffffffff0001, 0xf9, "90849348d79540ce6636eb99ddd96033c6e44ce23bae5e6f08864382c53b8cf137f8e13756c2e2926834aac742040dafc3a8a573d08c56f3848f1c0b04392e3c6d23aff8edd2e716fc468c6c4bd7f5b1bea683ca9ba4d74129af3d785575cef9a2ffcac40028995abcd66d90515469e9ca665ecd1aa7390cf71cea12a8cbacc9d877cf851d1d940a9f6467f145cf5f8130690dcf763015093225b61220c07d33713b5c1cc31e3820f08df7d7bd6d8b5e46a660700dc4ae436988ccddbbbace520d391a7c9e4a0f4339e175620abdab18f80f0290c8ef2962cb89a5ed71a7c28b30e8e6e9d295da60cad2aa9d483e3a5767856d22ec0c1137a6"}, 0x101) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) fcntl$notify(r0, 0x402, 0x13) r1 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x1, 0x60080) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000400)={0x800000000000110}) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000300)=0x0) syz_open_procfs(r2, &(0x7f0000000340)='task\x00') openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_kvm_setup_cpu$x86(r1, r1, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000280)="430f01cb3e0f01dfc4227529a430ead40000c401d95cd6c441acc6f921b9800000c00f3235002000000f30c4c3695eaa097600007b0f01b2002000000f01980001c0feb8010000000f01d9", 0x4b}], 0x1, 0x1, &(0x7f0000000180)=[@flags={0x3, 0x8100}], 0x1) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x7ff, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$audion(&(0x7f0000000000)='/dev/audio#\x00', 0x7fa, 0x0) write$input_event(r1, 0x0, 0xfffffffffffffe07) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000000)) socket$alg(0x26, 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x5000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000380)) r1 = accept4$inet(0xffffffffffffffff, &(0x7f0000000180)={0x2, 0x0, @multicast1}, &(0x7f0000000200)=0x10, 0x80000) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) ioctl$VIDIOC_G_FBUF(r2, 0x8030560a, &(0x7f0000000080)={0x50, 0x8, &(0x7f0000000040)="8793d088215504e5b58cd2b4fb8ea33559076a39d09c62599b0fd13212786a9ae65fc620b5440ba17c20ccd666d64295ac", {0x3ff, 0x80000001, 0x0, 0x9, 0x7e, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000280)={0x4, {0x2, 0x4e21}, {0x2, 0x4e23, @multicast1}, {0x2, 0x4e21, @local}, 0x4, 0x7, 0x8, 0x3ff, 0x7, &(0x7f0000000240)='bond0\x00', 0xb1, 0x80000000, 0x8}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x40}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000080)={r2, @in6={{0xa, 0x4e23, 0x8, @local}}}, 0x84) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r1, 0x80045301, &(0x7f0000000000)) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:56 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 5: pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) flistxattr(r0, &(0x7f0000000200)=""/1, 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000040)={0xffffffffffffff9c, 0x28, &(0x7f0000000000)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000080)={r2, 0x0, 0x18}, 0xc) r3 = syz_open_dev$sndpcmp(&(0x7f00000000c0)='/dev/snd/pcmC#D#p\x00', 0x100000000, 0x101000) ioctl$SG_GET_SG_TABLESIZE(r3, 0x227f, &(0x7f0000000100)) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0x58, "207fc366a20d4d818ac8943dd0adff2976d142325cd725afb1def9050adde10e844f558c766b215cff79c5041b2cc6cefef696e07a5a085e75a61bcf04e7a02dc13faf627ec53c05172ad2ed566051158c76cbe30f4761b5"}, &(0x7f0000000080)=0x60) setsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f00000000c0)={r2, 0x7}, 0x8) close(r1) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:56 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) fstatfs(r0, &(0x7f0000000200)=""/4096) 16:14:56 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:56 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x20100, 0x0) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x8) gettid() r2 = fcntl$getown(r1, 0x9) kcmp(r2, r2, 0x4, r1, r0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) write$binfmt_elf32(r0, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], 0x91f) setsockopt$netlink_NETLINK_PKTINFO(r3, 0x10e, 0x3, &(0x7f0000000040)=0xfffffffffffffffa, 0x4) 16:14:57 executing program 4: openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x208002, 0x0) openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/status\x00', 0x0, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/dlm_plock\x00', 0x4000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) unlinkat(r2, &(0x7f0000000000)='./file0\x00', 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) sendto$inet(r1, &(0x7f0000c95ffd), 0x49b8, 0x0, &(0x7f000057bff0)={0x2, 0x4e20, @multicast1}, 0x10) prctl$PR_GET_SECCOMP(0x15) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x404) 16:14:57 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) sync_file_range(r0, 0x101, 0xee, 0x4) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) fremovexattr(r1, &(0x7f0000000000)=@known='trusted.overlay.redirect\x00') 16:14:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) mq_timedsend(r1, &(0x7f0000000000)="4942eddf74de7f4f4d2c6deaea0abce2d967d929f5deaa201c16ed7c25", 0x1d, 0x1, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:57 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x100) r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$evdev(r1, &(0x7f00000002c0)=[{{0x0, 0x2710}, 0x1, 0x3, 0x6}, {{}, 0x3, 0x5, 0xe09}, {{}, 0x15, 0xfffffffffffffffa, 0x9}, {{r2, r3/1000+10000}, 0x2, 0x4, 0x3}, {{}, 0x1, 0xfffffffffffffff9, 0x6}, {{r4, r5/1000+10000}, 0x1f, 0x7, 0x4}], 0x90) r6 = syz_open_dev$mouse(&(0x7f0000000200)='/dev/input/mouse#\x00', 0x8bba, 0x203ff) ioctl$SG_SCSI_RESET(r6, 0x2284, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r7 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x8000, 0x2) ioctl$EVIOCGUNIQ(r7, 0x80404508, &(0x7f0000000040)=""/23) setsockopt$inet_group_source_req(r7, 0x0, 0x2f, &(0x7f0000000380)={0x3, {{0x2, 0x4e23, @loopback}}, {{0x2, 0x4e22, @remote}}}, 0x108) 16:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) socket$inet(0x2, 0x1, 0x25c) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x80) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:57 executing program 4: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x20000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000000c0)=0xfffffffffffeffff) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0xff, 0x4400) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000100)) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x3) ioctl$LOOP_SET_CAPACITY(r2, 0x4c07) rt_sigaction(0x1f, &(0x7f0000000240)={&(0x7f0000000180)="c463756f3f03660ff35586c46285976200c422a99ee3c4a21d0c042500000000360fe556fd363916c422e5395e00c483e56c0b92c4613d71d200", {0x3}, 0xc0000000, &(0x7f00000001c0)="660f3a0b2b2ac401ffe6aed3730000f240a7c130503e400fc6f8c2c4c129dca2000001000f0fa0f37a7c52aec4a3c579380d8f0878c095e7000000c6c441dc546800"}, &(0x7f0000000300)={&(0x7f0000000280)="c42149ea3bc44278f355de0f0fd0bf66f3a48f0860ed156200000001c461f9e626f2426e66420f380b68a2478a8b09000000c4c2bdbd6503", {}, 0x0, &(0x7f00000002c0)="f244a5af6747ef8f897881d6660f3838ac00000880418f291093d3c422919fb80000000066656642c28800c463115c647200dfc422b9ba69da"}, 0x8, &(0x7f0000000340)) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) fstat(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0}) r2 = getegid() fchown(r0, r1, r2) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:57 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$nl_generic(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000100}, 0xc, &(0x7f0000000100)={&(0x7f0000000200)={0x1184, 0x20, 0x8, 0x70bd25, 0x25dfdbff, {0x15}, [@nested={0x1164, 0x2e, [@typed={0x14, 0x57, @ipv6=@mcast1}, @generic="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", @typed={0x8, 0x19, @fd=r0}, @generic="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", @typed={0x14, 0x6f, @ipv6=@local}, @typed={0x14, 0x73, @ipv6=@ipv4={[], [], @remote}}, @typed={0x14, 0x1b, @ipv6=@mcast1}, @typed={0x8, 0x9, @uid=r2}]}, @typed={0xc, 0x6e, @u64=0x2}]}, 0x1184}, 0x1, 0x0, 0x0, 0x10}, 0x8000) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) socketpair$inet_udplite(0x2, 0x2, 0x88, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000200)={0x2, {0x2, 0x4e21, @multicast1}, {0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x2, 0x4e23, @multicast2}, 0x8, 0x1, 0x0, 0x3f, 0x1, &(0x7f00000000c0)='dummy0\x00', 0xffffffff, 0x16b2, 0xd36}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x5, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x80, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x800000000000, 0x18501) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x20}) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f0000000000)={0x0, 0x0, [], @raw_data=[0x6, 0x4, 0x401, 0x8, 0x5d1f, 0x9, 0x8, 0x789d50d6, 0x7, 0x2, 0xfffffffffffffffe, 0x3, 0x6, 0x0, 0xff, 0xa9b, 0x44, 0x5be, 0x400, 0x5, 0x7, 0xb9e, 0x4, 0x9, 0x100000000, 0x0, 0xffffffffffffffff, 0x9, 0x5, 0x1f, 0x3, 0x9]}) 16:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r2, 0xc00c642e, &(0x7f0000000000)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_GEM_CLOSE(r1, 0x40086409, &(0x7f0000000040)={r3}) 16:14:57 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x4500) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:57 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:57 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff000, 0x0) ioctl$VT_RESIZEX(r1, 0x560a, &(0x7f0000000040)={0x5, 0x20, 0xbdcb, 0xff, 0x3, 0x100000000}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) write(r2, &(0x7f0000000080)="34d474230d72a9a6b701ddc3bb79833cf77761a24305bf032c6949c5c0995623c8d3785ed524aa95030c2a2177930eeef85fe2cd2dc5f92507f34be4362095064a63f6e836b46d3183ba6153c7f400a5b89d3e9d8313ea38227c8549d3cca719282eb9658003e24608a04234bb19e687815631cea5e6edebfcb2", 0x7a) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x6000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @link_local, 'team0\x00'}}) prctl$PR_MCE_KILL(0x21, 0x0, 0x0) 16:14:58 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x0, 0x0) fcntl$getownex(0xffffffffffffff9c, 0x10, &(0x7f0000000040)={0x0, 0x0}) write$P9_RGETLOCK(r0, &(0x7f0000000080)={0x30, 0x37, 0x2, {0x2, 0x5, 0x3, r1, 0x12, '/dev/snd/pcmC#D#p\x00'}}, 0x30) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) syz_mount_image$btrfs(&(0x7f0000000000)='btrfs\x00', &(0x7f0000000040)='./file0\x00', 0x9, 0x9, &(0x7f00000016c0)=[{&(0x7f0000000080)="d9821653b5bbcf6861db8e7cd6b4ec765a2d6cb439f09f1fd51a6c106d4651e13d652a65abde44475de1fb0580325d84778c73937b2c7d81ac5419a22f", 0x3d, 0xfffffffffffffeff}, {&(0x7f0000000200)="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", 0x1000, 0x7}, {&(0x7f0000001200)="4fbb509b86fa4f748daed0787286a7d23d2ccb76fe1ebcb5aea2fef519f05a4fa96a04862d76dda6df357a635639a4f2a36a1ddd8c4864f28f1eeac0e944a9b8ae6f0632b96c4ada55f237bf07a0428cbb6324fd10beea033439ca40f77172ec1211c3c4437679b6816df036204116580e45178debfb3d1424e7ebae4d9994ce867075c9655c7ccd48a42ce5e7e0e7f6d0bc42bed25ba778c49e3b159bf291ff18574c18eb863951d310f7a67bf0d586f2f58721c03c5ec57ed404ab1abd3f28c2b71d1360d3e09b15c99051e21d655fb452e15aee09d260ac39d714b455e10c6d", 0xe1, 0xfff}, {&(0x7f0000001300)="7ed9e8e0c574f98ee7ed5d60e7c47c344a707fca7019b8ff0191b26351783695629375b0e249cc63b8d39f4e41b89460559c2a28a30d152d1b87909a7e333b8f2d2273ece5fcd67022ca8fa29dae856a910a1fe3eb68cc14cdab0d3a207ae229d852702bc6af2a1bb2cc09b22c948ef8117e6ddea54ce5ad69cbdf0837a3fd1bd24b890fcc896b18b2748b6acaf93638563eca66a7bbe20d90bb4b2addcc21639595913708474091a9f147add06b62cecfd91b3653ff20eae86be8715291066bd202bcd24274bba2e44d057814f465d50ad3a5a9ccb8c9468e9c5c9f", 0xdc, 0x1000}, {&(0x7f00000000c0)="d478b543f4390f0d3bc94debe83037afe5340b36d10e6e394fa1cbc179a6", 0x1e, 0xffffffffffffffa1}, {&(0x7f0000000100)="f8a52dc7444d", 0x6, 0x1}, {&(0x7f0000001400)="7fb6823d66b6eb341e762a289b413ed9828ade937c7c80ca73a1c7c1b98efc1135f5f5b7c12f50da4a953ad7a7838c5b50bbfe4d135e635635e1b72a30fabeabc7aaac4606684d97294ce3d9a128e74c8349ebe9f0148cc297e30d166b7bb738c75827ba435e71830415b0e278b02368e99bbee546fb10ec3be45f75f36f9edfeb6911a92e", 0x85, 0xd1a}, {&(0x7f00000014c0)="1c04b01c6ceb0c237eda3befb7b746c3625e9187265e9a8ed6795ec30e6244e7f82ad27587cbd0acca732fbe54867f6627c37e2f9661560c2b14bb02dbfee1d379989ab36fb8260a96769621a444ee7ea950b5dc56e0f533d2c8182d7fa277c9082db6e7fdeedde15d6b37b5616ad1fa8e439913da099dd3433523d0f1c4fa2da8c1dd7c01116b6105f15e9fecdfb9549eac6226f45c0cce63e8d8017b139be8eb1b0855a2f0994405302ba2a7902f02436d25a05d2a92384b36fb55b1b918e71b0baf6e297a50d8cd6299669cd8a2ba9ab0d5c2227e52a701727a2cda79234e56870811bb1a98fa9bab", 0xea, 0x5ec}, {&(0x7f00000015c0)="f974731e84d921e136e5153a2d8189179714bfbbbb9063d7255ff3acf857252aff96c35e94aaa0eb1ad36a13cc148a26151f6f18fbb41eaaa8bccc10c701617673a39d1b35da3fb8296c39f3f2928e7866ceb894d691bb77e5e88f9d1fa37566d5d24dbc9ccd7fdd6135ede0c55621213f24afce4e091c174d698be3b17a8047ed69c0df9d2faeac70034f1f0007578d79af137079ed02dc9a3753978a470caeb75d594863580f3218a222ad8eaeba9eef4247f4fe9a97bd3587496cf75a5458f76db112eabb793f268a34ec610674", 0xcf, 0x8a4b}], 0x8040, &(0x7f0000000180)={[{@barrier='barrier'}], [{@smackfshat={'smackfshat'}}]}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000017c0)={0x2, [0x0, 0x0]}, &(0x7f0000001800)=0xc) 16:14:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xe7ff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x800, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000040)={{0x3, 0x3, 0x9, 0x1, 0x78}}) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000180)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000200)='/dev/snd/pcmC#D#p\x00', 0x0, 0x404) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x80001, 0x0) ioctl$RNDZAPENTCNT(r2, 0x5204, &(0x7f00000000c0)=0xff) 16:14:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$KVM_HYPERV_EVENTFD(r1, 0x4018aebd, &(0x7f0000000000)={0x2, r1, 0x1}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x100) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x400000, 0x0) r1 = syz_open_dev$media(&(0x7f00000000c0)='/dev/media#\x00', 0x100000000, 0x141200) write$input_event(r1, 0x0, 0x94) r2 = syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x7, 0x4000) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x200, 0x0, 0x2, "1131a3c101d72ecf1eff6257e408743c784e47402f41430e1a132286f677b7b7", 0x31364d59}) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000100)={0x5, 0x0, 0x1}) ioctl$DRM_IOCTL_AGP_BIND(r2, 0x40106436, &(0x7f0000000180)={r3, 0x7}) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x3, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x5, 0x6, 0x7, 0x9, 0x9}, 0x2c) unshare(0x400) ioctl$TIOCCONS(r1, 0x541d) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x7, 0x2, &(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], &(0x7f00000000c0)='GPL\x00', 0x2, 0xd4, &(0x7f00000001c0)=""/212}, 0x48) ioctl$RTC_WKALM_SET(r1, 0x4028700f, &(0x7f0000000000)={0x1, 0x1, {0x26, 0x0, 0x13, 0x5, 0x7, 0x3, 0x1, 0x64, 0x1}}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x1000000800040, 0x404) 16:14:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 317.617072] audit: type=1400 audit(1543162498.643:61): avc: denied { map_read } for pid=13246 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:14:58 executing program 3: r0 = open(&(0x7f0000000000)='./file0\x00', 0x101000, 0x18) ioctl$VIDIOC_SUBDEV_G_FMT(r0, 0xc0585604, &(0x7f0000000040)={0x1, 0x3, {0x85b8, 0x3, 0x0, 0x2, 0xb, 0x1, 0x3, 0x7}}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x3ff, 0x0) ioctl$SCSI_IOCTL_DOORUNLOCK(r1, 0x5381) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:58 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x4001000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x200, 0x440) write$input_event(0xffffffffffffffff, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x40, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:58 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x500000000000000, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$sock_inet6_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000000)) 16:14:58 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:58 executing program 5: syslog(0x3, &(0x7f00000000c0)=""/147, 0x37a8ec531be3c41f) mkdir(&(0x7f0000000080)='./file0\x00', 0x0) mount(&(0x7f0000018000), &(0x7f0000027000)='./file0\x00', &(0x7f0000018ffa)='sysv\x00', 0x1202480, 0x0) 16:14:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 4: open(&(0x7f00000000c0)='./file0\x00', 0x111440, 0x111) openat$audio(0xffffffffffffff9c, &(0x7f0000000100)='/dev/audio\x00', 0xc0000, 0x0) r0 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm_plock\x00', 0x20c0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, 0x0) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x140202, 0x0) prctl$PR_GET_PDEATHSIG(0x2, &(0x7f0000000000)) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x4c}) 16:14:59 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f0000000040)=0x101) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$KDENABIO(r2, 0x4b36) 16:14:59 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000000040)='/dev/snd/controlC#\x00', 0x52, 0x2380) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$VIDIOC_QUERYCAP(r1, 0x80685600, &(0x7f0000000200)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000380)='/dev/audio\x00', 0x30080, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x1) ioctl$VIDIOC_ENUMINPUT(r1, 0xc050561a, &(0x7f00000000c0)={0x483, "08f059197d3bde33e4e2cbd8901464189e7564b53bcdfa7177f492f64895b4dc", 0x3, 0x4, 0x1, 0x2100000, 0x400, 0xd7a2da08a7cd72d5}) ioctl$TIOCSBRK(r2, 0x5427) 16:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x600, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$usb(&(0x7f0000000000)='/dev/bus/usb/00#/00#\x00', 0x70b, 0x20800) fcntl$setflags(r0, 0x2, 0x1) ioctl$VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000040)={0xc000000000000000, 0xf, 0x0, "5be6896fe0b3a7b3dfde56ce1de0e01dc8c20d839d3f46edfe0fb68f896e3b7f", 0x3234564e}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x3) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) prctl$PR_MPX_DISABLE_MANAGEMENT(0x2c) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$sock_int(r2, 0x1, 0x2d, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 16:14:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 5: 16:14:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x100004, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x8, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x40000, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:14:59 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x81, 0x1) r0 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) write$P9_RCLUNK(r0, &(0x7f0000000080)={0xfffffffffffffef3, 0x79, 0x2}, 0x7) syz_open_dev$adsp(&(0x7f00000000c0)='/dev/adsp#\x00', 0x7, 0x80) 16:14:59 executing program 5: 16:14:59 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) open_by_handle_at(r0, &(0x7f0000000080)={0x2a, 0x2604, "f74069dae9206c146e328db8401990a3a540ed8d80048cb3df2b743426725bfdadbb"}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1000000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)=0xb4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 16:14:59 executing program 5: 16:14:59 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:14:59 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:14:59 executing program 5: 16:15:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKROSET(r1, 0x125d, &(0x7f0000000040)=0x8001) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r2, 0xc00c642d, &(0x7f0000000080)={0x0, 0x80000, r1}) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000002c0)={0x0, 0x0, 0x1f}) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000300)={r3, r4}) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) mkdir(&(0x7f00000000c0)='./file0\x00', 0x0) lsetxattr(&(0x7f0000712ff8)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00', &(0x7f0000000040)="02000000010000000000f4ff0100000000000000", 0x14, 0x0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000380)={0x0, @in6={{0xa, 0x4e21, 0xee, @loopback, 0x3}}, 0x7ff, 0x7fffffff, 0x3, 0x7, 0x2a}, &(0x7f00000000c0)=0x98) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000100)={r6, 0x90, &(0x7f0000000200)=[@in6={0xa, 0x4e20, 0xffffffffffff8000, @local, 0x8}, @in={0x2, 0x4e21, @rand_addr}, @in6={0xa, 0x4e22, 0x7, @loopback, 0x3}, @in6={0xa, 0x4e22, 0x6, @mcast2, 0x4}, @in6={0xa, 0x4e21, 0xa6f3, @remote, 0x3}, @in={0x2, 0x4e23, @loopback}]}, &(0x7f0000000180)=0x10) 16:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x0, 0x8000) ioctl$DRM_IOCTL_RES_CTX(0xffffffffffffff9c, 0xc0106426, &(0x7f00000000c0)={0x4, &(0x7f0000000080)=[{0x0}, {}, {}, {}]}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r1, 0x4010641c, &(0x7f0000000100)={r2, &(0x7f0000000200)=""/72}) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000340)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000180)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000280)={0x0}, &(0x7f00000002c0)=0xc) write$cgroup_pid(r1, &(0x7f0000000300)=r5, 0x12) setsockopt$inet_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000000)='tls\x00', 0x4) ioctl$DRM_IOCTL_AGP_ENABLE(r4, 0x40086432, &(0x7f0000000380)=0xff) 16:15:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 5: 16:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000080)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000100)={0x3, 0x4, [0x6]}) bind$bt_rfcomm(r1, &(0x7f0000000040)={0x1f, {0x0, 0x4, 0x1ff, 0x101, 0x9, 0x80000000}, 0x5}, 0xa) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000000)='nv\x00', 0x3) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r2, 0xc0305710, &(0x7f00000000c0)={0x1, 0xea4a, 0x93a, 0x5ed93a83}) 16:15:00 executing program 5: 16:15:00 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) ioctl$RTC_IRQP_SET(r1, 0x4008700c, 0x4bf) 16:15:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:00 executing program 5: 16:15:00 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) prctl$PR_SET_TSC(0x1a, 0x1) r1 = syz_open_dev$adsp(&(0x7f0000000100)='/dev/adsp#\x00', 0x4, 0x9063c4796c44eeba) ioctl$SG_GET_RESERVED_SIZE(r1, 0x2272, &(0x7f0000000080)) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x2000, 0x0) write$P9_RMKNOD(r1, &(0x7f0000000040)={0x35e, 0x13, 0x1, {0x0, 0x3, 0x3}}, 0xfffffe5d) semget(0x0, 0x0, 0x480) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000000)) 16:15:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 5: 16:15:00 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000)=0x5, 0x4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:00 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x28000) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setxattr$security_selinux(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.selinux\x00', &(0x7f0000000080)='system_u:object_r:devpts_t:s0\x00', 0x1e, 0x3) 16:15:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0xffefffffffffff7f) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r1, &(0x7f0000e33fe0)='X', 0x1, 0x0, 0x0, 0x0) shutdown(r1, 0x1) r2 = socket$inet6(0xa, 0x803, 0x3) ioctl(r2, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") close(r0) 16:15:00 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x400100000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 3: ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) r0 = getpgid(0xffffffffffffffff) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0x4, &(0x7f0000000000)=""/111) 16:15:00 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:00 executing program 5: r0 = socket$inet6(0xa, 0x1, 0x0) r1 = dup(r0) setsockopt$sock_int(r1, 0x1, 0x4, &(0x7f0000000380)=0x1, 0x4) stat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) fsetxattr$security_ima(r2, &(0x7f0000000480)='security.ima\x00', &(0x7f00000004c0)=@ng={0x4, 0xc, "fb0175d726436af6c9"}, 0xb, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(0xffffffffffffffff, 0x29, 0x44, 0x0, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000200)=0x5) accept(0xffffffffffffffff, 0x0, 0x0) perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$BLKBSZSET(0xffffffffffffffff, 0x40081271, &(0x7f0000000540)) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) fcntl$notify(0xffffffffffffffff, 0x402, 0x0) ioctl$TUNGETFILTER(0xffffffffffffffff, 0x801054db, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20}, 0x1c) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f00000007c0), 0x4) setsockopt$inet_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) openat$cgroup_int(0xffffffffffffffff, 0x0, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x41, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x2400, 0x0) r3 = open(&(0x7f00000008c0)='./file0\x00', 0x20141042, 0x0) ioctl$RNDADDENTROPY(r1, 0x40085203, &(0x7f0000000280)=ANY=[@ANYBLOB="ff77d8de1590ff9854816f0bafa9dc8ca8030000a70000003509b83aa032364a699aacb93ac0dcb0e8af30196c7241acd8fa5a491e33a9861a6792a1affbd097d3cadc122f2fa0211042e48702bb950c9de4474d30e4ea877ffb9b1d5f1e19917d3d33cc7e290263ce8c335c8f025b71fe8dfa644f1d41825b3479ace788c160616f3300305a6da6774ab7063d9994c63546a74de1f6fe5fdbc46a7183190a76703c54daa0c6171be42b8c00000000"]) ftruncate(r3, 0x80080) sendfile(r1, r3, &(0x7f0000d83ff8), 0x2008000fffffffe) 16:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r1, 0x119, 0x1, &(0x7f0000000000), 0x4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 320.011674] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. 16:15:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 3: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000002c0)={0xffffffffffffffff, r1, 0x0, 0xb, &(0x7f0000000180)='/dev/audio\x00'}, 0x30) r3 = gettid() kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000300)={r1, r1, 0x53b6}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000000)={0x0, @in={{0x2, 0x4e24, @loopback}}, 0x3, 0x13f}, &(0x7f00000000c0)=0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000200)={r4, @in={{0x2, 0x4e20, @broadcast}}}, &(0x7f0000000100)=0x84) r5 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000340)={'vlan0\x00'}) 16:15:01 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000080)='/dev/snd/pcmC#D#p\x00', 0x1fffffffffffffe, 0x100000000405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/qat_adf_ctl\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_LNSMODE(0xffffffffffffffff, 0x111, 0x4, 0x0, 0x4) perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_DIRTY_TLB(r0, 0x40046104, &(0x7f00000014c0)) 16:15:01 executing program 3: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0x800000000000012, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'vlan0\x00', 0x1000000802}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, &(0x7f0000000180)={"766c616e300000f6ffffffffffffff00"}) 16:15:01 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x400100000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(&(0x7f0000000300)=ANY=[], &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000058c0)=[{{&(0x7f0000004380)=@hci, 0x80, &(0x7f0000001b40)=[{&(0x7f0000004400)=""/194, 0xc2}], 0x1, &(0x7f0000004500)=""/27, 0x1b}}], 0x1, 0x0, &(0x7f0000003280)={0x0, 0x1c9c380}) preadv(r1, &(0x7f00000009c0)=[{&(0x7f0000000500)=""/154}, {&(0x7f00000003c0)=""/68}, {&(0x7f00000005c0)=""/214}, {&(0x7f00000006c0)=""/194}, {&(0x7f00000007c0)=""/146}, {&(0x7f0000000880)=""/144}, {&(0x7f0000000480)=""/13}, {&(0x7f0000000940)=""/71}], 0x2a9, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:01 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="440000002000010000000000000000000200000000000000000000001c000000080015000000000008000b000000000008000b00060000000c001400", @ANYRES32=0x0, @ANYRES32], 0x3}}, 0x0) 16:15:01 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:01 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x5000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) open_by_handle_at(r0, &(0x7f0000000080)={0x2a, 0x2604, "f74069dae9206c146e328db8401990a3a540ed8d80048cb3df2b743426725bfdadbb"}, 0x0) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000000)={0x0, 0x1000000000}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000200)=ANY=[@ANYRES32=r2, @ANYBLOB="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"], &(0x7f0000000180)=0xb4) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) 16:15:02 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x8, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r1, 0xc0045540, &(0x7f0000000040)=0x23ba) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:02 executing program 3: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 5: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x5, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x50000000) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:02 executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl(r0, 0x20000000008912, &(0x7f00000001c0)="0a5c2d0240316285717070") r1 = socket(0x1e, 0x805, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) r2 = socket(0x1e, 0x2, 0x23fc) bind(r2, &(0x7f0000afb000)=@generic={0x1e, "01030000000000b9000000004700000000a979f321b30c7bc8790405c7bad62e0a63a632ed4938d36d73fb8f8401a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb3151d24acef1f1622ca5bdb9c8ea31000077aeb81c90001b6d7c980400000000f70dc136cb184a"}, 0x80) r3 = shmget(0x1, 0x2000, 0x900, &(0x7f0000ffc000/0x2000)=nil) shmctl$IPC_STAT(r3, 0x2, &(0x7f0000002200)=""/4096) r4 = socket(0x1e, 0x2, 0x0) ioctl(r4, 0x100000008912, &(0x7f0000000000)="153f6234488dd25d766070") r5 = socket$inet6_tcp(0xa, 0x1, 0x0) get_mempolicy(&(0x7f0000000080), &(0x7f00000000c0), 0x5, &(0x7f0000ffb000/0x4000)=nil, 0x7) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) r6 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r7 = socket$inet6(0xa, 0x1000000000002, 0x0) fcntl$setstatus(r7, 0x4, 0x2000) r8 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r8, &(0x7f0000000180)={0xa, 0x0, 0x0, @remote, 0x9}, 0x2c5) mmap(&(0x7f000020b000/0x2000)=nil, 0x2000, 0x1000008, 0x40010, r6, 0x1000) r9 = msgget(0x1, 0x0) r10 = syz_open_dev$dspn(&(0x7f0000000340)='/dev/dsp#\x00', 0xfffffffffffffff8, 0x86000) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r10, 0x8008ae9d, &(0x7f0000000380)=""/247) msgctl$IPC_RMID(r9, 0x0) r11 = openat$md(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/md0\x00', 0x80000, 0x0) fsetxattr$security_smack_transmute(r0, &(0x7f0000000140)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000240)='TRUE', 0x4, 0x3) fcntl$getownex(r8, 0x10, &(0x7f0000000100)={0x0, 0x0}) ioctl$EXT4_IOC_RESIZE_FS(0xffffffffffffffff, 0x40086610, &(0x7f0000000280)=0x9) ioctl$BLKTRACESETUP(r11, 0xc0481273, &(0x7f00000001c0)={[], 0x7, 0x5, 0x4, 0x9, 0xffffffff, r12}) write$binfmt_script(r8, &(0x7f0000000540)=ANY=[@ANYBLOB="2321202e2f666905dfaf3c3913750fc1ef8c70b68e0b6dbe418807e1044a9d87747d8e0ba85312a0187080fa4242515e54235359f3867010670020b7d34b273b0faf499d4208dbc3632c12345e2174489e0eb0da97ae86b32d11860888ea9e9ad25d8852f678a3ada658d3bf28cbd8fc6175bbf060228e4e3eb9065ec692effb7b672bb80ddd1619c83f03b70d9114336dad43d04a1203f6adcd062162be912a7650900ce0ff2d4f62af18bca0243b22e5727b5e0000000000000000"], 0xbb) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0x0, 0x40031, 0xffffffffffffffff, 0x0) 16:15:02 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1fffffffe00, 0x5, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4142) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) setsockopt$inet6_dccp_int(r1, 0x21, 0x6, &(0x7f0000000000)=0x4, 0x4) 16:15:02 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1fffffffe00, 0x5, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1fffffffe00, 0x5, 'queue0\x00'}) ioctl$SNDRV_TIMER_IOCTL_START(0xffffffffffffffff, 0x54a0) 16:15:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0xfdfdffff00000000, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:02 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000000)={0x0, 0x1fffffffe00, 0x5, 'queue0\x00'}) 16:15:02 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x700, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 4: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x3) lstat(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$sock_inet_SIOCSIFDSTADDR(r1, 0x8918, &(0x7f00000000c0)={'veth1_to_bond\x00', {0x2, 0x4e20, @multicast2}}) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r2, 0x6, 0x15, &(0x7f0000000100)=0x100, 0x4) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) 16:15:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) getsockopt$inet_sctp_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 16:15:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) openat$audio(0xffffffffffffff9c, &(0x7f0000000140)='/dev/audio\x00', 0x140202, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x300, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:03 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r1, 0xae44, 0x400) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, &(0x7f00000000c0)={0x0, 0x0, 0x7}) r2 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) ioctl$RTC_AIE_OFF(r2, 0x7002) 16:15:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:03 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 4: openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/rtc0\x00', 0x400000, 0x0) write$P9_ROPEN(r0, &(0x7f0000000340)={0x18, 0x71, 0x2, {{0x51, 0x4, 0x5}, 0x4}}, 0x18) mknodat(0xffffffffffffffff, &(0x7f0000000180)="2e2f66692e65318c", 0x0, 0x0) r1 = socket$bt_bnep(0x1f, 0x3, 0x4) accept4(r1, &(0x7f00000001c0)=@l2, &(0x7f0000000240)=0x80, 0x800) r2 = fanotify_init(0x0, 0x0) mount$overlay(0x0, &(0x7f00000004c0)="2e2f66692e65318c00", &(0x7f0000000500)='overlay\x00', 0x20, &(0x7f0000000540)={[{@default_permissions='default_permissions'}, {@redirect_dir={'redirect_dir', 0x3d, "2e2f66692e65318c"}}], [{@fscontext={'fscontext', 0x3d, 'system_u'}}, {@obj_type={'obj_type', 0x3d, 'nilfs2\x00'}}, {@smackfsfloor={'smackfsfloor', 0x3d, 'wlan1GPL-procppp1#\\cpuset*'}}, {@dont_appraise='dont_appraise'}]}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) fsetxattr(0xffffffffffffffff, &(0x7f00000004c0)=ANY=[], &(0x7f0000000300)='ppp0\x00', 0x5, 0x0) timer_create(0x0, &(0x7f0000000000)={0x0, 0x0, 0x3, @thr={&(0x7f0000000040), &(0x7f0000000140)}}, &(0x7f0000044000)) sync_file_range(0xffffffffffffffff, 0x1, 0x3, 0x5) r3 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) r4 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r4, &(0x7f000047b000)={0xa, 0x4e20}, 0x1c) listen(r4, 0x20000000) r5 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r5, &(0x7f0000419000)={0xa, 0x4e20, 0xfec0000000000000, @loopback}, 0x1c) r6 = accept4(0xffffffffffffffff, &(0x7f00004d4000)=@nl=@proc, &(0x7f0000000000)=0x80, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, &(0x7f0000000040)=0x100000000001f, 0x87) fanotify_mark(r2, 0x11, 0x2, 0xffffffffffffffff, &(0x7f0000000380)="2e2f66692e65318c00") write$FUSE_DIRENT(r3, &(0x7f00000003c0)={0x100, 0xfffffffffffffffe, 0x1, [{0x5, 0x2, 0x5, 0x8, 'ppp0\x00'}, {0x3, 0xfffffffffffffffd, 0x12, 0xd7, '/dev/snd/pcmC#D#p\x00'}, {0x0, 0x3, 0x6, 0x0, 'cpuset'}, {0x0, 0x165, 0x12, 0x1, '/dev/snd/pcmC#D#p\x00'}, {0x1, 0x2, 0x0, 0x78587f8f}, {0x0, 0x3, 0x1c, 0x6, '$posix_acl_access\'mime_type('}]}, 0x100) mount(&(0x7f00000000c0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000100)="2e2f66692e65318c00", &(0x7f0000000140)='nilfs2\x00', 0x198f28f8c4678da9, &(0x7f0000000280)='\x00') creat(&(0x7f00000006c0)="2e2f66692e65318c00", 0x40) write$evdev(0xffffffffffffffff, &(0x7f0000000680), 0x0) 16:15:03 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:03 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 4: r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000000)) r1 = syz_open_pts(r0, 0x20201) fcntl$setstatus(r1, 0x4, 0x2800) ioctl$TCXONC(r1, 0x540a, 0x0) r2 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x3, 0x2) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000180)={0x1f, 0x9, 0x2, "989b9bb707e75a315fd7fd237d9e77dd68633e373565cb496e17b84522fd0a88", 0x30314742}) write(r1, &(0x7f00000001c0)="ff33576e7be666ebcdfb58fa227e2ce96dbf6c52293092c6bdfeb3ad4782e50aa58d2af601c925ffc91735428395", 0x2e) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000080)=0xe) pipe2(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4000) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r3, 0x29, 0x41, &(0x7f0000000100)=ANY=[@ANYBLOB="6d616e676c650000000000000000000000000000000000800000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffe400000000"], 0x68) ioctl$UI_SET_SWBIT(r3, 0x4004556d, 0x7) close(r3) 16:15:04 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x6, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 4: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$KVM_SMI(r0, 0xaeb7) close(r1) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040), &(0x7f0000000080)=0x4) dup3(r0, r1, 0x0) 16:15:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x100004, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(0xffffffffffffffff, 0xc0505350, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4001000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 4: r0 = syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0xffffffffffffffff, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) bind(r1, &(0x7f0000000200)=@generic={0x11, "af3fc2d70fa8516aa03904e96ea5a9840b8f593f15c95506bee76c010351014300adab710e9f091438b7f0ad43b3e5b709ea649a144680cb6cdadbe44f6d71bac02459770747c5baaf7b2b38ebb63631bc4964de14c940673e2c69f5e66569b99e0cd72e3351a9db42e7342f2fbe706e0a296efb8d3df3db9349b5b7169e"}, 0x80) r2 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$KVM_SET_XSAVE(r2, 0x5000aea5, &(0x7f0000000480)={"819419e1e8ce488f5d0d2a179f5ddecca777b26174cc3c61aa2412fb90b9919d52540f597a4ce9ee55d3a8398726a2027b04dd7b7d5f93e8d6e5ddc91fe9a7bc4449c957e5ef37f610f15db5b2255f2a1c5d6144e7de9360731d5e4176b3c101b285cfadb34230ae738a496fc71b718aee225de9f6ae34ad5041753c3a9e9ae03c5a15fc6b2324d5ba4c9f3d861543a1417f2f378b953eb9db2a61562a03a47b7586781b528fd02fa202af0749ae1f624a7d6e3028616ccbe3bf6a6ddf1efb4886a70eba5c77e2badea9fcfc5f93c2fd8115c9aeea0e90ecc52983fe00bc330bbabeb26c2a782ca59ae075f428045153570466df300a0fc5f1c4dc529b89c74de5744b731d8d9f2ada469d88f0c0799f53d494ab3feeae4fb55355d4bcdaa70c97b1c5b22a2b217e1430ad0bcb320e545aa84a30dcc41e276bdd6306a153de45b028576b094644ace2a8bad45cd0f7e55378c1f6800d0c280b7145a0d0af79076480e897d53fa3c0f42de37af310a07df8474094ad5af0ea8f536b90db81714dd746e662b94e3f368799e7f9e31d3aee5c3c6680fc23a00948a450167e3528b93830cf3202eb917de20cd0c03652649f8a04765a8a6048e46c205d28bcb142a6f1c2ea5fdc3bfd93c89f7e741de89c9085566eb35374494315ad0504ce98df91787378030771fe23041e77c7889ca10c974317c4f61fc19c78fd7fcd6983528b8dc45267e74d38adb93550983ab0a6801d41526330db5464e1fa70cedebe3b221ac1be4907f7723e61d2795e04c845352f9e72c3d0c2d79de0b552dc531fa10b817c204f3bb0cd24777cf6fce8d31837ad2896b6687b94ec4f378884c97c8578796d5aaac4c89c6a353688e4feae7c207e16e25d6312a04ee50729733385aef3d108a1bae1964945be378cf2b67d84ed52b4c263c14d36151c656206e38ad97f3725934c6f331ab0faa55a033cde5f44169a74b611954c049a404e4774f85316255ab2299cbb0fbb6eb68f25432e3b30c94eace00e11e94dd53ddbb813b7c8d8ea9a52dad7784a048fb4ea8c1a123a2010a7aa0498462ad94d6674a2ca2d1816920f5e6953c74e639f2705c87c88e69c08fcf47ac953191b6c23a32fb736f92c272cfcafda1395320eddf7d062a1bbbd37e370a95897e43867e4d1791b38d3fff4e10b9c3cfc68717d56a97be0a573f810e75c51594a76bee954ce9285af20fdabf99cb34308a56e32edbf7945421bd84d0e189a98721852bd8b0a45bfa5bb14d243c90d888591b57e9213f4a542da089c1c397d7f00beb523223d2e4695c33515aa1fcbaa05f918bed639bfd6da702df7f91c13597b5c252140462ab2b5e5c4c5fe314af6b55541317dba415814754c5d65ef5f848da69e0fda466aa6b57b1377afb0652f4e4870e7bc36bed54da52514501b4ffe778192a8dfcb69c142cb72"}) open$dir(&(0x7f0000000040)='./file0\x00', 0x400000, 0x0) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x8000}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$NBD_CLEAR_SOCK(r0, 0xab08) ioctl$KVM_S390_UCAS_MAP(r2, 0x4018ae50, &(0x7f0000000080)={0x1, 0x3ff, 0x5}) ioctl$KVM_ASSIGN_SET_MSIX_ENTRY(r2, 0x4010ae74, &(0x7f00000001c0)={0x7, 0x100000001, 0x8}) write$binfmt_script(r0, &(0x7f00000003c0)={'#! ', './file0', [{0x20, 'proc\x00'}], 0xa, "776df1ac129b27fcbbbe09af087e943cd0c7a59818d2605bce5b08d1394bce7bf263395886ef9317584e44899ce4d88b8858128af44870d3639e57745a4d39396c4d01071d2d9df3448bbce7141db9d05bdd17bdbec6c4b7202a3156cd7ba87a6de9b55cb88490111d2509300b6a8e2306c0fe1e97ac7b62a0212f48546ffc2c2278040ad409054f101998e231c4"}, 0x9f) 16:15:04 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:04 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x500000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:04 executing program 3: socket$inet6(0xa, 0x803, 0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 324.017526] QAT: Invalid ioctl [ 324.034757] block nbd0: NBD_DISCONNECT [ 324.070033] QAT: Invalid ioctl 16:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 3: socket$inet6(0xa, 0x803, 0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600000000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 324.106323] QAT: Invalid ioctl [ 324.126079] QAT: Invalid ioctl [ 324.143797] QAT: Invalid ioctl [ 324.144070] block nbd0: NBD_DISCONNECT 16:15:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 324.202086] QAT: Invalid ioctl 16:15:05 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @dev}, 0x10) sendto$inet(r0, &(0x7f0000001540)="af781bfdf8499a9e252e4246b971314191c38a4ffb58cd330648ddeb9db4e55243300c5b4ddaf18934cee59d9ccbba29e9edf21716f93c0734cbeb97f7269e61db84", 0x42, 0x4000014, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f00000015c0)="766574683100000000ffffffffffef00", 0x10) r1 = dup2(r0, r0) sendmsg$IPVS_CMD_GET_CONFIG(r1, &(0x7f00000001c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000140)={&(0x7f00000018c0)=ANY=[@ANYBLOB="529fcd2414cd091cac05178794a58343c1a55db3bf4da64706fda0b02433b1ad44cb5b64f9c300dd41b8778cc36c596a71561387874e27f72fa9c8d0fb4115365fb18c03ad5ff2aace0fc0d75e495720fdb7bce445469d96f0f92fc496479da3ba1df3eb29897e3d4d04530e653f775488d1b0a1a47ba8c4158108b6f55719025ea47f59ccca236177f5a32cf55404ee43b9e6afc9eec12d26e47e0e6d40b19bc31336bdc8a8cf969930193b45259d651db382ded4362ec04c3a91af41a1d3cb63797fe3534e530eb01f54f4e3e282ddbb9cd074a0a0cd367e770750abe0e485c32c920e750894e82ee1a892817e00620033ec6553764079"], 0x1}}, 0x44801) sendmsg$FOU_CMD_DEL(r1, &(0x7f00000013c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000280)={&(0x7f0000001400)=ANY=[]}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380), 0xfdf5) sendto$inet(r0, &(0x7f0000000000), 0x0, 0xc0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000100)=0x8) lgetxattr(&(0x7f0000000300)='./file0\x00', &(0x7f0000000340)=@known='trusted.overlay.metacopy\x00', &(0x7f00000003c0)=""/4096, 0x1000) clock_gettime(0x0, &(0x7f0000000240)) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f00000002c0)={r2, 0x0, 0x0, 0xffff}, 0x14) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r1, 0xc0045516, &(0x7f0000001480)=0xa) setsockopt$inet_buf(r1, 0x0, 0x0, &(0x7f00000017c0)="61f0ae734fdfcdf1a4e2a8a94971c0083231f25ebc1e37fe596e40d94734313021c7a030f986f3b0c17cf8711ce2a70f07cd51954897cb7c80f108d10ef1dfcc3245230207a13a", 0x47) r3 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x400300) ioctl$sock_inet_SIOCGIFADDR(r3, 0x8915, &(0x7f0000000100)={'veth0\x00', {0x2, 0x4e21, @remote}}) r4 = socket$alg(0x26, 0x5, 0x0) rt_sigpending(&(0x7f0000000040), 0x8) connect$bt_sco(r3, &(0x7f0000000180)={0x1f, {0x400, 0x18, 0x0, 0x9acb, 0xffff, 0x1}}, 0x8) bind$alg(r4, &(0x7f0000000200)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes256\x00'}, 0x50) open(&(0x7f00000001c0)='./file0\x00', 0x200002, 0x5) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="0a0775b0d5e383e5b3b60ced5c54dbb7295df0df8217ad4000000000000000e6", 0x20) msgget(0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f00000014c0)=0x0) lstat(&(0x7f0000001500)='./file1\x00', &(0x7f0000001740)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000001600)=[0xee01, 0x0, 0xee01, 0xee00, 0xee01]) setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000001640)={r5, r6, r7}, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000140)={0x6, 0x1, 0x2, 0x3, 0x4, 0xffffffffffffffff, 0xfffffffffffffffc}, 0x2c) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0x3, 0x10000, 0x4, 0x7, 0xa, 0x1, 0x9}, 0x2c) 16:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x4001000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 3: socket$inet6(0xa, 0x803, 0x3) r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 5: r0 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 4: mkdir(&(0x7f0000000000)='./file0\x00', 0x0) perf_event_open(&(0x7f000000a000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x20000000, 0x10000000006, 0x0, 0x20000000}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x2, 0x1, 0x0, 0x0, 0x0, 0x1}, 0x2c) mount(&(0x7f0000000080)=ANY=[@ANYBLOB="2b3b3291f455ac8856943e090082e8739ae7c4b35107b4bf5d224ee760c3689107fc23fad23a89685fe0bae30100006c150448178b15cbce7d"], &(0x7f00000000c0)='./file0\x00', &(0x7f00005f7ffb)='nfs4\x00', 0x0, &(0x7f000000a000)) 16:15:05 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 4: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='loginuid\x00') sendfile(r0, r0, 0x0, 0x10000000004) r1 = getuid() r2 = geteuid() sendmsg$nl_netfilter(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2100}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="08007f00", @ANYRES32=r2, @ANYBLOB="daba49a0b60aa82f626ecb0800ba8a9fd85e9765bd130ad47019d650358d69e3c11597523da558"], 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x4) write$eventfd(r0, 0x0, 0x0) 16:15:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:05 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xffffffe7, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:05 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x38, 0x10, 0xe3b, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, @vti={{0x8, 0x1, 'vti\x00'}, {0xc, 0x2, [@IFLA_VTI_LOCAL={0x8, 0x6, @multicast2}]}}}]}, 0x38}}, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$inet6_mreq(r0, 0x29, 0x15, &(0x7f0000000400)={@ipv4={[], [], @multicast2}, r1}, 0x14) 16:15:06 executing program 4: get_thread_area(&(0x7f0000000000)={0xc1d, 0xffffffffffffffff, 0x0, 0x9, 0x13f, 0x6, 0x2, 0x1, 0x3f, 0x1f}) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/sys/net/ipv4/vs/cache_bypass\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f00000000c0)={0x0, 0xf6f, 0x20, 0x2, 0x7}, &(0x7f0000000140)=0x18) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r1, 0x3d285a4f, 0x10}, 0xc) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'veth1_to_bond:\x00', &(0x7f0000000100)=@ethtool_sfeatures={0x45}}) 16:15:06 executing program 3: ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x3000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 5: syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 4: mprotect(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x2000006) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x400000000001, 0x0) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x0, 0x9, 0x8, 0x0, 0xffffffff, 0x0, 0x200, 0x0, 0x401, 0x0, 0x3553800000, 0x7f}) r1 = socket(0xa, 0x3, 0x200000000008) bind$alg(r1, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'ccm_base(pcbc(anubis),rmd128)\x00'}, 0x58) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={"6272696467653000000100"}) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) r2 = syz_open_dev$sndctrl(0x0, 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, &(0x7f0000000880)) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_NEW_DEST(r1, &(0x7f0000000500)={&(0x7f00000006c0), 0xc, &(0x7f0000000540)={&(0x7f0000000740)=ANY=[]}, 0x1, 0x0, 0x0, 0x4000010}, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000a00)='IPVS\x00') sendmsg$IPVS_CMD_GET_CONFIG(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f00000004c0), 0xc, &(0x7f0000000580)={&(0x7f0000000640)=ANY=[@ANYBLOB="780027bdd19871c3392f00001400e204000000000000003258e04c7dd80000000000000000000000000000"], 0x1}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, &(0x7f0000000b40)="8f36be1ab89efdf54cb881f49ba3be6f5195c8c226397b30d3f0", 0x1a) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000140)) ioctl$SNDRV_CTL_IOCTL_ELEM_INFO(r2, 0xc1105511, &(0x7f00000001c0)={{0xa, 0x0, 0x0, 0x0, 'syz0\x00', 0x4}, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 'syz0\x00', 0x0, 0x0, [], [0x80000001, 0x0, 0x8, 0x401]}) pipe2(&(0x7f0000000900)={0xffffffffffffffff}, 0x84000) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000480)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000440)={0xffffffffffffffff}, 0x13f, 0x2}}, 0x20) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000680)={0xb, 0x10, 0xfa00, {&(0x7f0000000380), r4, 0x101}}, 0x18) mknodat(0xffffffffffffffff, &(0x7f0000000180)='./file0\x00', 0x30, 0x8000) 16:15:06 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 325.399342] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.406777] bridge0: port 1(bridge_slave_0) entered disabled state 16:15:06 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:06 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:06 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x400100000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 4: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000200)='/dev/qat_adf_ctl\x00', 0x20000, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000280)={0x5, 0x7, 0x3001}, 0x4) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000140)='/dev/cuse\x00', 0x82, 0x0) read(r1, &(0x7f00000003c0)=""/198, 0xfffffffffffffeda) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000380)=0x4000008, 0x4) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000600)={{0x800, 0x7}, 0xffffffffffffffff, 0x206, 0x7fffffff, {0x352, 0xffffffff}, 0x80000000008000, 0x7d}) r2 = open(&(0x7f00000002c0)='./file0\x00', 0x10800, 0x4) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f00000001c0)={0xfffffffffffffe01, 0x5, 0x8000}, 0x4) write$FUSE_INTERRUPT(r1, &(0x7f0000000180)={0x10, 0x0, 0x2}, 0x10) 16:15:07 executing program 3: r0 = socket$inet6(0xa, 0x0, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x400100000000000, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 326.106593] QAT: Invalid ioctl 16:15:07 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 326.130055] QAT: Invalid ioctl 16:15:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 4: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) accept(r0, 0x0, &(0x7f0000000040)) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={&(0x7f0000000080), 0xc, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="3800000020002100000000567430456bfc9d2033ba771e7d5800000000000200000200000000000000001100000008000b00000000000800"], 0xff90}}, 0x0) r2 = pkey_alloc(0x0, 0x3) pkey_mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x8, r2) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4001000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0xe7ffffff, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 4: perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140)='/dev/sequencer\x00', 0x200000, 0x0) write$P9_RWRITE(r2, &(0x7f0000000100)={0xb, 0x77, 0x1, 0x6}, 0xb) setsockopt$sock_int(r1, 0x1, 0x23, &(0x7f00000000c0)=0x7f, 0x228) ioctl$BLKREPORTZONE(r2, 0xc0101282, &(0x7f0000000180)={0x20, 0x5, 0x0, [{0xffffffff, 0x3413, 0x400000000000000, 0x3ff, 0x0, 0x200, 0x2}, {0x4, 0x5, 0xff, 0x7fff, 0x7, 0xffff}, {0x7, 0xfffffffffffffff7, 0x5, 0x101, 0x6, 0x2, 0x4}, {0x5a, 0x20, 0x9, 0x0, 0x3, 0x2, 0xffffffff}, {0x7, 0x1000, 0x100000000, 0x9, 0x5, 0x8, 0x9e}]}) sendmmsg(r0, &(0x7f000000d8c0)=[{{0x0, 0x0, &(0x7f0000000500)}}], 0xff, 0x0) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x700, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:15:07 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x0) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(0x0, 0x0, 0x405) 16:15:07 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 4: clone(0x200, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000100), &(0x7f00000003c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3ff, 0x3, 0x6, 0x3152, 0x0, 0x8, 0x0, 0x2, 0x3, 0x5, 0x2, 0x7, 0x6, 0x9, 0x9, 0x5e99, 0x7f, 0x0, 0x9, 0x100, 0x9, 0x100, 0x6, 0x80000000, 0x5, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffffff80, 0x80000000, 0x8, 0x5, 0x1, 0x5, 0x9, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000140), 0x2}, 0x889, 0x7, 0x1ff, 0xf, 0x6, 0x6, 0x2cf}, r0, 0xf, 0xffffffffffffffff, 0x8) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f0000000300)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0xfffffffffffffe6d) r4 = gettid() fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x2, 0xffffffffffffffff, &(0x7f0000000000)) exit(0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 16:15:07 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x600, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:07 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 3: socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:15:08 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 3: socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 3: socket$inet6(0xa, 0x803, 0x3) ioctl(0xffffffffffffffff, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 4: clone(0x200, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000100), &(0x7f00000003c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3ff, 0x3, 0x6, 0x3152, 0x0, 0x8, 0x0, 0x2, 0x3, 0x5, 0x2, 0x7, 0x6, 0x9, 0x9, 0x5e99, 0x7f, 0x0, 0x9, 0x100, 0x9, 0x100, 0x6, 0x80000000, 0x5, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffffff80, 0x80000000, 0x8, 0x5, 0x1, 0x5, 0x9, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000140), 0x2}, 0x889, 0x7, 0x1ff, 0xf, 0x6, 0x6, 0x2cf}, r0, 0xf, 0xffffffffffffffff, 0x8) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f0000000300)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0xfffffffffffffe6d) r4 = gettid() fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x2, 0xffffffffffffffff, &(0x7f0000000000)) exit(0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 16:15:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:15:08 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:08 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100004, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x0, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 4: clone(0x200, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000100), &(0x7f00000003c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3ff, 0x3, 0x6, 0x3152, 0x0, 0x8, 0x0, 0x2, 0x3, 0x5, 0x2, 0x7, 0x6, 0x9, 0x9, 0x5e99, 0x7f, 0x0, 0x9, 0x100, 0x9, 0x100, 0x6, 0x80000000, 0x5, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffffff80, 0x80000000, 0x8, 0x5, 0x1, 0x5, 0x9, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000140), 0x2}, 0x889, 0x7, 0x1ff, 0xf, 0x6, 0x6, 0x2cf}, r0, 0xf, 0xffffffffffffffff, 0x8) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f0000000300)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0xfffffffffffffe6d) r4 = gettid() fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x2, 0xffffffffffffffff, &(0x7f0000000000)) exit(0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 16:15:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x0) 16:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x400100000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 4: clone(0x200, &(0x7f0000000340), &(0x7f0000000200), &(0x7f0000000100), &(0x7f00000003c0)) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) r0 = gettid() perf_event_open(&(0x7f0000000180)={0x7, 0x70, 0x3ff, 0x3, 0x6, 0x3152, 0x0, 0x8, 0x0, 0x2, 0x3, 0x5, 0x2, 0x7, 0x6, 0x9, 0x9, 0x5e99, 0x7f, 0x0, 0x9, 0x100, 0x9, 0x100, 0x6, 0x80000000, 0x5, 0xfffffffffffffffe, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffffff80, 0x80000000, 0x8, 0x5, 0x1, 0x5, 0x9, 0x0, 0x6, 0x3, @perf_bp={&(0x7f0000000140), 0x2}, 0x889, 0x7, 0x1ff, 0xf, 0x6, 0x6, 0x2cf}, r0, 0xf, 0xffffffffffffffff, 0x8) execve(&(0x7f0000f8aff8)='./file0\x00', &(0x7f0000a7bfc8), &(0x7f0000000300)) r1 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r2, 0x5452, &(0x7f0000008ff8)=0x3f) recvfrom$unix(r3, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000d93ff6)=@abs, 0xfffffffffffffe6d) r4 = gettid() fcntl$setown(r2, 0x8, r1) fcntl$setsig(r2, 0xa, 0x12) dup2(r2, r3) tkill(r1, 0x16) kcmp$KCMP_EPOLL_TFD(r4, r1, 0x2, 0xffffffffffffffff, &(0x7f0000000000)) exit(0x0) r5 = open(&(0x7f0000000080)='./file0\x00', 0x401, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r5, 0x5411, &(0x7f0000000040)) 16:15:09 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, 0x0) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:09 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r1, 0x84, 0x6e, &(0x7f0000000040), 0xfb01cbdd028b9044) r2 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200) openat$cgroup_int(r2, &(0x7f00000000c0)='cpuset.mem_exclusive\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x71, &(0x7f0000000040), &(0x7f0000000080)=0x10) dup2(r0, r0) mmap(&(0x7f0000000000/0x237000)=nil, 0x237000, 0x2, 0x32, 0xffffffffffffffff, 0x0) 16:15:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 5: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)) r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 5 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:10 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:10 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 329.927050] FAULT_INJECTION: forcing a failure. [ 329.927050] name failslab, interval 1, probability 0, space 0, times 0 [ 329.978176] CPU: 0 PID: 14355 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 329.985594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 329.994955] Call Trace: [ 329.997563] dump_stack+0x244/0x39d [ 330.001220] ? dump_stack_print_info.cold.1+0x20/0x20 [ 330.006437] should_fail.cold.4+0xa/0x17 [ 330.010518] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.015636] ? check_preemption_disabled+0x48/0x280 [ 330.020668] ? find_held_lock+0x36/0x1c0 [ 330.024753] ? __f_unlock_pos+0x19/0x20 [ 330.028748] ? find_held_lock+0x36/0x1c0 [ 330.032912] ? fuse_request_queue_background+0x2b8/0x680 [ 330.038393] ? kasan_check_write+0x14/0x20 [ 330.042644] ? perf_trace_sched_process_exec+0x860/0x860 [ 330.048118] ? wait_for_completion+0x8a0/0x8a0 [ 330.052717] __should_failslab+0x124/0x180 [ 330.056967] should_failslab+0x9/0x14 [ 330.060777] kmem_cache_alloc+0x2be/0x730 [ 330.064957] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.070516] ? check_preemption_disabled+0x48/0x280 [ 330.075555] getname_flags+0xd0/0x590 [ 330.079374] getname+0x19/0x20 [ 330.082582] do_sys_open+0x383/0x700 [ 330.086313] ? filp_open+0x80/0x80 [ 330.089887] ? trace_hardirqs_off_caller+0x310/0x310 [ 330.095015] __x64_sys_open+0x7e/0xc0 [ 330.098851] do_syscall_64+0x1b9/0x820 [ 330.102751] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 330.108126] ? syscall_return_slowpath+0x5e0/0x5e0 [ 330.113065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.117922] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.122954] ? prepare_exit_to_usermode+0x3b0/0x3b0 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.127988] ? prepare_exit_to_usermode+0x291/0x3b0 [ 330.133031] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.137897] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.137910] RIP: 0033:0x4111a1 [ 330.137927] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 330.137935] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 330.146326] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 330.146336] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 330.146345] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 330.146354] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 330.146363] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 16:15:11 executing program 4: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) r1 = getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(0x0, r1, 0x0, 0x0) faccessat(r0, &(0x7f0000000040)='.\x00', 0x7, 0x1700) socketpair$inet6_udplite(0xa, 0x2, 0x88, &(0x7f0000000080)) 16:15:11 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 5 (fault-call:2 fault-nth:1): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.576672] audit: type=1400 audit(1543162511.593:62): avc: denied { write } for pid=14386 comm="syz-executor4" name="ns" dev="proc" ino=45332 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 330.603286] FAULT_INJECTION: forcing a failure. [ 330.603286] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 330.615138] CPU: 1 PID: 14391 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 16:15:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.622718] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 330.632080] Call Trace: [ 330.634691] dump_stack+0x244/0x39d [ 330.638344] ? dump_stack_print_info.cold.1+0x20/0x20 [ 330.643562] ? print_usage_bug+0xc0/0xc0 [ 330.647632] ? __lock_acquire+0x62f/0x4c20 [ 330.651888] should_fail.cold.4+0xa/0x17 [ 330.655971] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.661104] ? mark_held_locks+0x130/0x130 [ 330.665367] ? zap_class+0x640/0x640 [ 330.669097] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c12628571") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.674654] ? _kstrtoull+0x188/0x250 [ 330.678476] ? _parse_integer+0x180/0x180 [ 330.682637] ? zap_class+0x640/0x640 [ 330.686373] ? lock_release+0xa00/0xa00 [ 330.690369] ? perf_trace_sched_process_exec+0x860/0x860 [ 330.695848] ? find_held_lock+0x36/0x1c0 [ 330.699935] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 330.705485] ? should_fail+0x22d/0xd01 [ 330.709389] ? get_pid_task+0xd6/0x1a0 [ 330.713295] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 330.718412] ? check_preemption_disabled+0x48/0x280 16:15:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.723451] __alloc_pages_nodemask+0x366/0xea0 [ 330.728135] ? find_held_lock+0x36/0x1c0 [ 330.732217] ? __alloc_pages_slowpath+0x2de0/0x2de0 [ 330.737249] ? __f_unlock_pos+0x19/0x20 [ 330.741238] ? find_held_lock+0x36/0x1c0 [ 330.745335] ? trace_hardirqs_off+0xb8/0x310 [ 330.749774] cache_grow_begin+0xa5/0x8c0 [ 330.754382] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.759952] ? check_preemption_disabled+0x48/0x280 [ 330.764998] kmem_cache_alloc+0x66b/0x730 [ 330.769158] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 330.774713] ? check_preemption_disabled+0x48/0x280 [ 330.779757] getname_flags+0xd0/0x590 [ 330.783574] getname+0x19/0x20 [ 330.786779] do_sys_open+0x383/0x700 [ 330.790512] ? filp_open+0x80/0x80 [ 330.794074] ? trace_hardirqs_off_caller+0x310/0x310 [ 330.799195] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 330.804753] __x64_sys_open+0x7e/0xc0 [ 330.808570] do_syscall_64+0x1b9/0x820 [ 330.812468] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 330.817851] ? syscall_return_slowpath+0x5e0/0x5e0 [ 330.822797] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.827666] ? trace_hardirqs_on_caller+0x310/0x310 [ 330.832703] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 330.837739] ? prepare_exit_to_usermode+0x291/0x3b0 [ 330.842776] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 330.847637] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 330.852844] RIP: 0033:0x4111a1 [ 330.856046] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 16:15:11 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000300)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x1c9c380}) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000005e0007031dfffd946fa28300a20400ff7e0039801177bfb13e64ad4d15640000", 0x24}], 0x1}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req3={0xf5e5, 0x401, 0x5, 0x275b, 0x3, 0xfc, 0x7fffffff}, 0xffffffffffffff79) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4) io_setup(0x0, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0xf9a2, 0x9, 0x7, 0x9}, 0xc) 16:15:11 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:11 executing program 5 (fault-call:2 fault-nth:2): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 330.874950] RSP: 002b:00007f02ba3087a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 330.874967] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 330.874976] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba308850 [ 330.874985] RBP: 000000000072bfa0 R08: 000000000000000f R09: 0000000000000000 [ 330.874995] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba3096d4 [ 330.875004] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000003 16:15:12 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c1262857180") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.056819] FAULT_INJECTION: forcing a failure. [ 331.056819] name failslab, interval 1, probability 0, space 0, times 0 16:15:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.138804] CPU: 1 PID: 14430 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 331.146229] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.155594] Call Trace: [ 331.158211] dump_stack+0x244/0x39d [ 331.161879] ? dump_stack_print_info.cold.1+0x20/0x20 [ 331.167101] ? print_usage_bug+0xc0/0xc0 [ 331.171197] should_fail.cold.4+0xa/0x17 [ 331.175280] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.180410] ? __lock_acquire+0x62f/0x4c20 [ 331.184664] ? zap_class+0x640/0x640 [ 331.188407] ? find_held_lock+0x36/0x1c0 [ 331.192507] ? mark_held_locks+0x130/0x130 [ 331.196764] ? perf_trace_sched_process_exec+0x860/0x860 [ 331.202236] ? print_usage_bug+0xc0/0xc0 [ 331.206320] __should_failslab+0x124/0x180 [ 331.210578] should_failslab+0x9/0x14 [ 331.214390] kmem_cache_alloc+0x2be/0x730 [ 331.218548] ? zap_class+0x640/0x640 [ 331.222274] ? print_usage_bug+0xc0/0xc0 [ 331.226356] ? mark_held_locks+0x130/0x130 [ 331.230608] __alloc_file+0xa8/0x470 [ 331.234332] ? file_free_rcu+0xd0/0xd0 [ 331.238241] ? find_held_lock+0x36/0x1c0 [ 331.242330] ? is_bpf_text_address+0xac/0x170 [ 331.246854] ? lock_downgrade+0x900/0x900 [ 331.251020] ? check_preemption_disabled+0x48/0x280 [ 331.256058] alloc_empty_file+0x72/0x170 [ 331.260130] path_openat+0x170/0x5150 [ 331.260151] ? rcu_softirq_qs+0x20/0x20 [ 331.260166] ? unwind_dump+0x190/0x190 [ 331.260189] ? zap_class+0x640/0x640 [ 331.275560] ? path_lookupat.isra.43+0xc00/0xc00 [ 331.280328] ? unwind_get_return_address+0x61/0xa0 16:15:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.285278] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 331.290302] ? expand_files.part.8+0x571/0x9a0 [ 331.294904] ? find_held_lock+0x36/0x1c0 [ 331.298983] ? __alloc_fd+0x347/0x6e0 [ 331.302794] ? lock_downgrade+0x900/0x900 [ 331.306958] ? getname+0x19/0x20 [ 331.310344] ? kasan_check_read+0x11/0x20 [ 331.314528] ? do_raw_spin_unlock+0xa7/0x330 [ 331.318947] ? do_raw_spin_trylock+0x270/0x270 [ 331.323538] ? __lock_is_held+0xb5/0x140 [ 331.327610] ? __check_object_size+0xb1/0x782 [ 331.332133] ? _raw_spin_unlock+0x2c/0x50 16:15:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.336296] ? __alloc_fd+0x347/0x6e0 [ 331.340125] do_filp_open+0x255/0x380 [ 331.343962] ? may_open_dev+0x100/0x100 [ 331.347963] ? get_unused_fd_flags+0x122/0x1a0 [ 331.352781] ? __alloc_fd+0x6e0/0x6e0 [ 331.356608] do_sys_open+0x568/0x700 [ 331.360336] ? filp_open+0x80/0x80 [ 331.363899] ? trace_hardirqs_off_caller+0x310/0x310 [ 331.369023] __x64_sys_open+0x7e/0xc0 [ 331.372846] do_syscall_64+0x1b9/0x820 [ 331.376751] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 331.382124] ? syscall_return_slowpath+0x5e0/0x5e0 16:15:12 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.387065] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.391924] ? trace_hardirqs_on_caller+0x310/0x310 [ 331.396948] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 331.396966] ? prepare_exit_to_usermode+0x291/0x3b0 [ 331.396988] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.397010] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 331.417055] RIP: 0033:0x4111a1 [ 331.417073] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 331.417081] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 331.439172] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 331.439181] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 331.439190] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 331.439199] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 331.439209] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 16:15:12 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) clone(0x0, &(0x7f0000000240), &(0x7f00000002c0), &(0x7f0000000000), &(0x7f0000000300)) openat$smack_thread_current(0xffffffffffffff9c, &(0x7f0000000140)='/proc/thread-self/attr/current\x00', 0x2, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) recvmmsg(r0, &(0x7f0000004280)=[{{&(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f0000000440)}}], 0x1, 0x0, &(0x7f0000004340)={0x0, 0x1c9c380}) sendmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)="240000005e0007031dfffd946fa28300a20400ff7e0039801177bfb13e64ad4d15640000", 0x24}], 0x1}, 0x0) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000200)=@req3={0xf5e5, 0x401, 0x5, 0x275b, 0x3, 0xfc, 0x7fffffff}, 0xffffffffffffff79) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[], &(0x7f0000000040)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x4, 0x4) io_setup(0x0, &(0x7f0000000080)) setsockopt$bt_l2cap_L2CAP_OPTIONS(r1, 0x6, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x3, 0xf9a2, 0x9, 0x7, 0x9}, 0xc) 16:15:12 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:12 executing program 5 (fault-call:2 fault-nth:3): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:12 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.664300] FAULT_INJECTION: forcing a failure. [ 331.664300] name failslab, interval 1, probability 0, space 0, times 0 [ 331.710689] CPU: 0 PID: 14468 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 331.718092] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 331.727458] Call Trace: [ 331.730069] dump_stack+0x244/0x39d [ 331.733720] ? dump_stack_print_info.cold.1+0x20/0x20 [ 331.738934] ? is_bpf_text_address+0xd3/0x170 [ 331.743452] should_fail.cold.4+0xa/0x17 [ 331.747545] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 331.752816] ? save_stack+0xa9/0xd0 [ 331.756484] ? save_stack+0x43/0xd0 [ 331.760123] ? kasan_kmalloc+0xc7/0xe0 [ 331.764018] ? kasan_slab_alloc+0x12/0x20 [ 331.764034] ? kmem_cache_alloc+0x12e/0x730 [ 331.764050] ? __alloc_file+0xa8/0x470 [ 331.764065] ? alloc_empty_file+0x72/0x170 [ 331.764093] ? find_held_lock+0x36/0x1c0 [ 331.772572] ? perf_trace_sched_process_exec+0x860/0x860 [ 331.772592] ? check_preemption_disabled+0x48/0x280 [ 331.772617] __should_failslab+0x124/0x180 [ 331.799472] should_failslab+0x9/0x14 [ 331.803281] kmem_cache_alloc+0x2be/0x730 [ 331.807468] ? rcu_read_lock_sched_held+0x14f/0x180 [ 331.812516] selinux_file_alloc_security+0xb4/0x190 [ 331.817545] security_file_alloc+0x4c/0xa0 [ 331.817567] __alloc_file+0x12a/0x470 [ 331.817586] ? file_free_rcu+0xd0/0xd0 [ 331.817605] ? find_held_lock+0x36/0x1c0 [ 331.817631] ? is_bpf_text_address+0xac/0x170 [ 331.817663] ? lock_downgrade+0x900/0x900 [ 331.817681] ? check_preemption_disabled+0x48/0x280 [ 331.817700] alloc_empty_file+0x72/0x170 [ 331.842347] path_openat+0x170/0x5150 [ 331.842362] ? rcu_softirq_qs+0x20/0x20 [ 331.842376] ? unwind_dump+0x190/0x190 [ 331.842402] ? zap_class+0x640/0x640 [ 331.842424] ? path_lookupat.isra.43+0xc00/0xc00 [ 331.842442] ? unwind_get_return_address+0x61/0xa0 [ 331.876538] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 331.881566] ? expand_files.part.8+0x571/0x9a0 [ 331.886181] ? find_held_lock+0x36/0x1c0 [ 331.890260] ? __alloc_fd+0x347/0x6e0 [ 331.894077] ? lock_downgrade+0x900/0x900 [ 331.898232] ? getname+0x19/0x20 [ 331.901611] ? kasan_check_read+0x11/0x20 [ 331.905766] ? do_raw_spin_unlock+0xa7/0x330 [ 331.910191] ? do_raw_spin_trylock+0x270/0x270 [ 331.914785] ? __lock_is_held+0xb5/0x140 [ 331.918887] ? __check_object_size+0xb1/0x782 [ 331.923410] ? _raw_spin_unlock+0x2c/0x50 [ 331.927572] ? __alloc_fd+0x347/0x6e0 [ 331.931407] do_filp_open+0x255/0x380 [ 331.935229] ? may_open_dev+0x100/0x100 [ 331.939269] ? get_unused_fd_flags+0x122/0x1a0 [ 331.943903] ? __alloc_fd+0x6e0/0x6e0 [ 331.947729] do_sys_open+0x568/0x700 [ 331.951470] ? filp_open+0x80/0x80 [ 331.955020] ? trace_hardirqs_off_caller+0x310/0x310 16:15:12 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:12 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 331.960141] __x64_sys_open+0x7e/0xc0 [ 331.963955] do_syscall_64+0x1b9/0x820 [ 331.967870] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 331.973249] ? syscall_return_slowpath+0x5e0/0x5e0 [ 331.978188] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 331.983052] ? trace_hardirqs_on_caller+0x310/0x310 [ 331.988085] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 331.993113] ? prepare_exit_to_usermode+0x291/0x3b0 [ 331.998151] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.003016] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.008211] RIP: 0033:0x4111a1 [ 332.011415] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 332.030324] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 332.030344] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 332.030353] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 332.030362] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 16:15:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x600000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.030372] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 332.030381] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 16:15:13 executing program 5 (fault-call:2 fault-nth:4): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:13 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r2 = syz_open_dev$dmmidi(&(0x7f0000000000)='/dev/dmmidi#\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_GET_EVENT(r2, &(0x7f0000000080)={0xc, 0x8, 0xfa00, {&(0x7f0000000240)}}, 0x10) close(r1) 16:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x400100000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.185335] FAULT_INJECTION: forcing a failure. [ 332.185335] name failslab, interval 1, probability 0, space 0, times 0 16:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.313914] CPU: 0 PID: 14496 Comm: syz-executor5 Not tainted 4.20.0-rc3+ #128 [ 332.321314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 332.330688] Call Trace: [ 332.333294] dump_stack+0x244/0x39d [ 332.336949] ? dump_stack_print_info.cold.1+0x20/0x20 [ 332.342177] ? __lock_acquire+0x62f/0x4c20 [ 332.346440] should_fail.cold.4+0xa/0x17 [ 332.350514] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 332.355632] ? mark_held_locks+0x130/0x130 [ 332.355651] ? print_usage_bug+0xc0/0xc0 16:15:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.355677] ? lock_acquire+0x1ed/0x520 [ 332.355699] ? snd_lookup_minor_data+0x41/0x160 [ 332.367974] ? find_held_lock+0x36/0x1c0 [ 332.368014] ? perf_trace_sched_process_exec+0x860/0x860 [ 332.368027] ? zap_class+0x640/0x640 [ 332.368054] __should_failslab+0x124/0x180 [ 332.368074] should_failslab+0x9/0x14 [ 332.393935] kmem_cache_alloc_trace+0x2d7/0x750 [ 332.398619] ? snd_lookup_minor_data+0xbe/0x160 [ 332.403300] ? lock_downgrade+0x900/0x900 [ 332.407483] snd_card_file_add+0xbb/0x460 [ 332.411647] ? lock_downgrade+0x900/0x900 [ 332.415824] ? snd_component_add+0x180/0x180 [ 332.415856] ? rcu_softirq_qs+0x20/0x20 [ 332.415874] ? zap_class+0x640/0x640 [ 332.415893] ? kasan_check_write+0x14/0x20 [ 332.415914] ? __mutex_unlock_slowpath+0x197/0x8c0 [ 332.427980] snd_pcm_open+0xd0/0x940 [ 332.427997] ? refcount_inc_not_zero_checked+0x1e5/0x2f0 [ 332.428019] ? snd_pcm_open_substream+0x400/0x400 [ 332.428033] ? m_show+0x5d0/0x5d0 [ 332.428052] ? chrdev_open+0xde/0x710 [ 332.428073] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 16:15:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xffffffe7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.428090] ? refcount_inc_checked+0x29/0x70 [ 332.468497] ? snd_pcm_capture_open+0xe0/0xe0 [ 332.473008] ? snd_pcm_capture_open+0xe0/0xe0 [ 332.477519] snd_pcm_playback_open+0x87/0xe0 [ 332.481943] snd_open+0x21a/0x430 [ 332.485424] ? snd_request_card+0x80/0x80 [ 332.489596] chrdev_open+0x25a/0x710 [ 332.493323] ? cdev_put.part.0+0x50/0x50 [ 332.497401] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.502948] ? errseq_sample+0xe5/0x130 [ 332.506936] ? _copy_to_user+0x110/0x110 16:15:13 executing program 4: r0 = open(&(0x7f0000000040)='./file0\x00', 0xffffffffffffffff, 0x0) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000380)={'nat\x00', 0x0, 0x4, 0xa1, [], 0x4, &(0x7f0000000200)=[{}, {}, {}, {}], &(0x7f00000002c0)=""/161}, &(0x7f0000000400)=0x78) socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000080)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r1) r2 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x801, 0x0) ioctl$VIDIOC_G_DV_TIMINGS(r2, 0xc0845658, &(0x7f00000004c0)={0x0, @reserved}) io_setup(0xc01, &(0x7f0000000480)=0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(0xffffffffffffffff, 0x402c5342, &(0x7f0000000140)={0x1ff, 0x0, 0x0, {0x0, 0x989680}}) ioctl$TIOCMSET(r2, 0x5418, &(0x7f0000000440)=0x2000000000000) io_submit(r3, 0x1400, &(0x7f0000000240)=[&(0x7f0000000280)={0x0, 0x0, 0x0, 0x800000000001, 0x3f00, r1, &(0x7f0000000140), 0x2}]) setsockopt(0xffffffffffffffff, 0x0, 0x1000, &(0x7f0000000200), 0x0) bind(0xffffffffffffffff, &(0x7f00000000c0)=@generic={0x0, "9bab822c32e608631f5c14d557d502005efe7bb80b86526b51833790734bd83b320de89aefc9eb6dc2649bdf2b6ab524effc499e522cfbf5ea7aa1033b283235652bf370539dab5b776d5f788b9960df85ddf0e7bcb92ede0eb3db4ed60dd4c3806342de9067b7aecf9a6ae4edd919aec5bdf5aecb8ef68d0797117341f7"}, 0x80) ioctl$sock_ifreq(r0, 0x0, &(0x7f0000000180)={'bridge_slave_1\x00', @ifru_addrs=@l2={0x1f, 0x0, {0x9, 0x10000, 0x0, 0x0, 0x0, 0x7}, 0x0, 0x9}}) 16:15:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(0xffffffffffffffff, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.511023] do_dentry_open+0x499/0x1250 [ 332.515098] ? selinux_capable+0x40/0x40 [ 332.519175] ? cdev_put.part.0+0x50/0x50 [ 332.523249] ? chown_common+0x730/0x730 [ 332.527247] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 332.532826] ? security_inode_permission+0xd2/0x100 [ 332.537891] ? inode_permission+0xb2/0x560 [ 332.537915] vfs_open+0xa0/0xd0 [ 332.537934] path_openat+0x12bc/0x5150 [ 332.537948] ? rcu_softirq_qs+0x20/0x20 [ 332.537962] ? unwind_dump+0x190/0x190 [ 332.537993] ? path_lookupat.isra.43+0xc00/0xc00 [ 332.549380] ? unwind_get_return_address+0x61/0xa0 [ 332.549398] ? __sanitizer_cov_trace_cmp4+0x16/0x20 [ 332.549414] ? expand_files.part.8+0x571/0x9a0 [ 332.549439] ? find_held_lock+0x36/0x1c0 [ 332.571962] ? __alloc_fd+0x347/0x6e0 [ 332.571981] ? lock_downgrade+0x900/0x900 [ 332.571996] ? getname+0x19/0x20 [ 332.572018] ? kasan_check_read+0x11/0x20 [ 332.596121] ? do_raw_spin_unlock+0xa7/0x330 [ 332.600556] ? do_raw_spin_trylock+0x270/0x270 [ 332.605157] ? __lock_is_held+0xb5/0x140 [ 332.609232] ? __check_object_size+0xb1/0x782 [ 332.613752] ? _raw_spin_unlock+0x2c/0x50 [ 332.617919] ? __alloc_fd+0x347/0x6e0 [ 332.617963] do_filp_open+0x255/0x380 [ 332.617979] ? may_open_dev+0x100/0x100 [ 332.618008] ? get_unused_fd_flags+0x122/0x1a0 [ 332.618042] ? __alloc_fd+0x6e0/0x6e0 [ 332.618065] do_sys_open+0x568/0x700 [ 332.618086] ? filp_open+0x80/0x80 [ 332.645286] ? trace_hardirqs_off_caller+0x310/0x310 [ 332.650403] __x64_sys_open+0x7e/0xc0 [ 332.654218] do_syscall_64+0x1b9/0x820 [ 332.658160] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe 16:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 332.663536] ? syscall_return_slowpath+0x5e0/0x5e0 [ 332.668515] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.673366] ? trace_hardirqs_on_caller+0x310/0x310 [ 332.678395] ? prepare_exit_to_usermode+0x3b0/0x3b0 [ 332.683440] ? prepare_exit_to_usermode+0x291/0x3b0 [ 332.688470] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 332.693343] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 332.698544] RIP: 0033:0x4111a1 [ 332.701747] Code: 75 14 b8 02 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 b4 17 00 00 c3 48 83 ec 08 e8 8a fa ff ff 48 89 04 24 b8 02 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 d3 fa ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 332.720651] RSP: 002b:00007f02ba3297a0 EFLAGS: 00000293 ORIG_RAX: 0000000000000002 [ 332.728362] RAX: ffffffffffffffda RBX: 6666666666666667 RCX: 00000000004111a1 [ 332.735633] RDX: 0000000000000000 RSI: 0000000000000405 RDI: 00007f02ba329850 [ 332.735643] RBP: 000000000072bf00 R08: 000000000000000f R09: 0000000000000000 [ 332.735652] R10: 0000000000000013 R11: 0000000000000293 R12: 00007f02ba32a6d4 [ 332.735661] R13: 00000000004c5505 R14: 00000000004d9388 R15: 0000000000000004 16:15:13 executing program 5 (fault-call:2 fault-nth:5): r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:13 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400100000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x4001000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:13 executing program 4: r0 = socket(0x1, 0x3, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f00006f9000)=0x400000000007fb, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f000079d000), 0x4) ioctl$sock_proto_private(r0, 0x89ee, &(0x7f0000000000)="1c4b5bb160e9d0b25971b43d94068b") 16:15:13 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x5000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b7000000000000009500000000000000"], 0x0}, 0x48) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x18000000000002a0, 0x34, 0x0, &(0x7f0000000280)="b90703e6680d698cb89e40f02cead5dc57ee41dea43e63a377fb8a977c3f1d1788e8ad30d84648a27f11c72be0000e01e1977d48", 0x0, 0x100}, 0x28) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000002c0), 0xffffffffffffff05) ioctl$TUNSETSTEERINGEBPF(0xffffffffffffffff, 0x800454e0, &(0x7f0000000500)) syz_genetlink_get_family_id$fou(&(0x7f0000000440)='fou\x00') r1 = add_key(&(0x7f0000000080)='keyring\x00', &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000300)="fc9caf7707ffea061a4e88bd", 0xc, 0xfffffffffffffffc) keyctl$assume_authority(0x10, r1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x7, 0x0, &(0x7f0000000380)="8e5712f9ec625c", 0x0}, 0x28) ioctl$PERF_EVENT_IOC_SET_FILTER(0xffffffffffffffff, 0x89f1, &(0x7f0000000000)='ip6gre0\x00') ioctl$TUNGETSNDBUF(0xffffffffffffffff, 0x800454d3, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='/group.stat\x00', 0x2761, 0x0) syz_extract_tcp_res(&(0x7f0000000040), 0x80000000, 0x1) 16:15:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, 0x0) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100004, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='//ev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 4: syslog(0x3, &(0x7f0000000000), 0x0) r0 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x101000, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x2, {0x81, 0x8, 0x400, 0x20, 0xde2, 0x100}, 0xe9b, 0x68b7a5c0}, 0xe) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/.ev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffff9c, 0x29, 0x22, &(0x7f0000000200)={{{@in6=@remote, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast1}}, &(0x7f0000000300)=0xe8) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth0\x00', r1}) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) getsockopt$inet6_int(r3, 0x29, 0x4b, &(0x7f0000000080), &(0x7f0000000100)=0x4) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000000), 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='$\x00\x00\x00^\x00\a\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00'], 0x24}}, 0x0) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/.nd/pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev//nd/pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x0, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x0, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:14 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn./pcmC#D#p\x00', 0x0, 0x405) 16:15:14 executing program 4: syz_mount_image$vfat(&(0x7f0000000300)='vfat\x00', &(0x7f0000000080)='./file0\x00', 0x8000, 0x1, &(0x7f0000000200)=[{&(0x7f00000002c0)="eb58906d6b66732e66617400020120000200008000f8", 0x16}], 0x0, 0x0) r0 = open(&(0x7f00000000c0)='./file0\x00', 0xfffffffffffffffe, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000001fe8)) ioctl$SNDRV_SEQ_IOCTL_SUBSCRIBE_PORT(r0, 0x40505330, &(0x7f0000000140)={{0x9, 0xffffffffffffff00}, {0x5, 0x49db}, 0x9, 0x2, 0x7}) fstat(r0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) chown(&(0x7f0000000100)='./file0\x00', 0x0, r1) 16:15:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/sn//pcmC#D#p\x00', 0x0, 0x405) 16:15:15 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x0, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 334.102963] capability: warning: `syz-executor4' uses 32-bit capabilities (legacy support in use) 16:15:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$KDSIGACCEPT(r1, 0x4b4e, 0x21) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") mkdir(&(0x7f0000000440)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) r2 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f00000004c0)='cgroup.procs\x00', 0x2, 0x0) preadv(r3, &(0x7f00000009c0)=[{0x0}, {&(0x7f00000003c0)=""/68, 0x44}], 0x2, 0x0) 16:15:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x3000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x0, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/.cmC#D#p\x00', 0x0, 0x405) 16:15:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x0, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd//cmC#D#p\x00', 0x0, 0x405) 16:15:15 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000080)="0a5c2d023c126285718070") r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)=@ipv6_newrule={0x78, 0x20, 0x300, 0x70bd2b, 0x25dfdbfe, {0xa, 0x10, 0x94, 0x4, 0x7, 0x0, 0x0, 0x8, 0x10}, [@FRA_SRC={0x14, 0x2, @ipv4={[], [], @rand_addr=0x1}}, @FIB_RULE_POLICY=@FRA_L3MDEV={0x8, 0x13, 0x1}, @FRA_DST={0x14, 0x1, @ipv4={[], [], @multicast1}}, @FRA_DST={0x14, 0x1, @dev={0xfe, 0x80, [], 0x18}}, @FRA_SRC={0x14, 0x2, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x84}, 0x80) r2 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4000000014f6080507000000000000002ec8b566fbdf6ee90a000000", @ANYRES32=r3, @ANYBLOB="d0675a17f57bf3140009f10005000000000000000000000000000014000200fe8000000000000000000000000000aa"], 0x40}}, 0x0) ioctl$sock_SIOCBRADDBR(r1, 0x89a0, &(0x7f0000000000)='vcan0\x00') 16:15:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x0, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x300, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#.\x00', 0x0, 0x405) [ 334.725317] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62996 sclass=netlink_route_socket pig=14751 comm=syz-executor4 [ 334.755452] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62996 sclass=netlink_route_socket pig=14755 comm=syz-executor4 16:15:15 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x4) ioctl(r0, 0x8915, &(0x7f0000000080)="0a5cc80700315f85715070517338bf5923d4299f57fe53456529adf9980087e2829322165c4586b26dddde95cc97d725d0bf22d95b0c32dc3e341e59b442622d1a454f03b35014feafb6eb6774b3") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x4, 0x576f0000000000, 0x2, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x5}, 0x88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x10) shutdown(r3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x3}, 0x8) 16:15:15 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x0, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#/\x00', 0x0, 0x405) 16:15:15 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:15 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 335.056408] audit: type=1800 audit(1543162516.073:63): pid=14776 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17040 res=0 16:15:16 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x500000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370f6", 0x0, 0x405) 16:15:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 4: r0 = socket$inet6(0xa, 0x0, 0x4) ioctl(r0, 0x8915, &(0x7f0000000080)="0a5cc80700315f85715070517338bf5923d4299f57fe53456529adf9980087e2829322165c4586b26dddde95cc97d725d0bf22d95b0c32dc3e341e59b442622d1a454f03b35014feafb6eb6774b3") r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}, 0x0, 0x80000001}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000340)={0x0, r1, 0x4, 0x576f0000000000, 0x2, 0xffffffff}) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000c34000)) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x40c2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r2, 0x0, 0x2a, &(0x7f0000000280)={0x5}, 0x88) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e24, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10) connect$inet(r3, &(0x7f0000301000)={0x2, 0x0, @rand_addr=0x80000001}, 0x10) shutdown(r3, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000140)={0x0, 0x0, 0x3}, 0x8) 16:15:16 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x6000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x5000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:16 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237004", 0x0, 0x405) 16:15:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 335.966626] audit: type=1800 audit(1543162516.983:64): pid=14833 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=collect_data cause=failed(directio) comm="syz-executor4" name="file0" dev="sda1" ino=17119 res=0 16:15:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x700, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 4: r0 = userfaultfd(0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000009fe8)={0xaa, 0x22}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = userfaultfd(0x0) close(r1) clone(0x4800a000, &(0x7f0000001f37), 0x0, 0x0, 0x0) read(r0, &(0x7f0000000400)=""/100, 0x64) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x10000, 0x0) dup3(r1, r0, 0x0) ioctl$UFFDIO_COPY(r1, 0xc028aa03, &(0x7f0000000100)={&(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x1000)=nil, 0x1000}) 16:15:17 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(0xffffffffffffffff, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x100000000000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:17 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:17 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, 0x0) 16:15:17 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 336.857427] IPVS: ftp: loaded support on port[0] = 21 16:15:17 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#pk', 0x0, 0x405) 16:15:18 executing program 4: mq_unlink(&(0x7f0000000040)='\x00') geteuid() r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) lsetxattr$trusted_overlay_upper(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='trusted.overlay.upper\x00', &(0x7f0000000140)={0x0, 0xfb, 0x17, 0x1, 0xffffffff, "01bc9c76a47ad16d0162c7661603cd92", "1549"}, 0x17, 0x3) 16:15:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x0, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d432344237002", 0x0, 0x405) [ 337.127494] IPVS: ftp: loaded support on port[0] = 21 16:15:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x300000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xe7ffffff, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 3 (fault-call:4 fault-nth:0): r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) epoll_ctl$EPOLL_CTL_MOD(r0, 0x3, r0, &(0x7f0000000040)) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'lo\x00', &(0x7f0000000000)=@ethtool_modinfo={0x42, 0x9, 0x5, "d5ae3404f629c194"}}) 16:15:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 4: r0 = socket$inet6(0xa, 0x1000000000002, 0x0) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) ioctl(r0, 0x8912, &(0x7f0000000280)="153f6234488dd25d766070") r1 = socket$inet(0x2, 0x5, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000100)='vcan0\x00', 0x10) sendmsg(r1, &(0x7f00000000c0)={&(0x7f0000000140)=@in={0x2, 0x4e20, @local}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000380)="f0", 0x1}], 0x1}, 0x0) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(r1, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e20, @local}}}, &(0x7f00000001c0)=0x98) 16:15:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x80087601, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x600000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5451, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:18 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:18 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc020660b, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\t', 0x0, 0x405) 16:15:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x500, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 4: recvmmsg(0xffffffffffffffff, &(0x7f0000003140)=[{{&(0x7f0000000000)=@generic, 0x80, &(0x7f0000000240), 0x0, &(0x7f0000000400)=""/4096, 0x1000}}], 0x1, 0x0, &(0x7f0000003280)) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000015c0)='mounts\x00') fsync(r0) preadv(r0, &(0x7f00000017c0), 0x1aa, 0x0) fcntl$getown(0xffffffffffffffff, 0x9) lstat(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000080)='/dev/rfkill\x00', 0x80900, 0x0) 16:15:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x4b47, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40045613, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:19 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x400100000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5460, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:19 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 4: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x60000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ppoll(&(0x7f0000000180)=[{}], 0x1, &(0x7f0000000280)={0x77359400}, &(0x7f00000002c0), 0x8) r2 = syz_open_dev$swradio(&(0x7f0000000040)='/dev/swradio#\x00', 0x0, 0x2) ioctl$KVM_GET_ONE_REG(r2, 0x4010aeab, &(0x7f0000000140)={0xfffffffffffffffe, 0x1}) ioctl$KVM_IRQFD(r1, 0x4020ae76, &(0x7f0000000000)) getdents(r2, &(0x7f00000001c0)=""/145, 0x91) write$eventfd(r1, &(0x7f00000000c0)=0x1, 0x8) 16:15:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffe7, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5421, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x400100000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585611, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:20 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:21 executing program 4: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000200)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_procs(r1, &(0x7f0000000100)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$kcm(0x29, 0x2, 0x0) sendfile(r1, r2, 0x0, 0x80) 16:15:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x4020940d, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffff, 0x0, @offset, 0x4}) 16:15:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)="2f6465762f736e642f70636d4323442370ff", 0x0, 0x405) 16:15:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5450, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 4: mkdir(&(0x7f0000000240)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000380)='/dev/fuse\x00', 0x2, 0x0) close(r0) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x0, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000100), &(0x7f0000000140)=0x4) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000400)={{0xfffffffffffffffe, 0x58, 0x100000001, 0xed9}, 0x8, 0x9, 0x10000, 0xe7, 0x7, "cfba1e7607ca42a237c6ae68268e55e9ee35844ece8f804ba46b18023cd92a433befd34b3ce215ded204eb595b95dca17982a69d8b978209ccf10df17bad61a3a7cf096379333851ce0bc45f06a7904c1a540a797e25d884b17ebe851898fc6e385106165e42cf24f0e2ae473fbcfbacfc762265f881e0069a0414605c2c8572"}) r2 = syz_open_dev$mouse(&(0x7f00000000c0)='/dev/input/mouse#\x00', 0x0, 0x0) mount$9p_fd(0x8000a0, &(0x7f0000000180)='./file0\x00', &(0x7f00000003c0)='9p\x00', 0x0, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r0}}) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:15:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x600, 0x0, @offset, 0x4}) 16:15:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff00000000, 0x405) 16:15:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0189436, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffff00000000, 0x0, @offset, 0x4}) 16:15:21 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x900000000000000, 0x405) 16:15:21 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:21 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc058565d, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2000000, 0x405) 16:15:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x7, 0x0, @offset, 0x4}) 16:15:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x400100000000000, 0x0, @offset, 0x4}) 16:15:22 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0285628, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:22 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) sendmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000002c0)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) 16:15:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xf6ffffff, 0x405) 16:15:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x100000000000000, 0x405) 16:15:22 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:22 executing program 4: mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000100)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000200)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="66643dcda550ccdcd44b9deee4a8efdf63ba128351cf6b6bf129b341f3ffd085223f250ede8d96b69ec10cb7f86da897b87a407492602846a462c8e126f151b395334fee21a2194d7b3351da29fa4f8600b05a603ce4a611fcf7f2d2d184819d15deac9039050c33545e7c0195a7b65a28a294914f3ecf54bc656d69ba07", @ANYRESHEX=r0, @ANYBLOB="2c726f6f746d6f64673d3030303030303030303030303030303030faedd8000000000000000000000000", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) rename(&(0x7f00000002c0)='./file0\x00', 0x0) stat(&(0x7f00000006c0)='./file0/file0\x00', 0x0) read$FUSE(r0, 0x0, 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) 16:15:22 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfd, 0x0, @offset, 0x4}) 16:15:22 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc100565c, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:22 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x500000000000000, 0x0, @offset, 0x4}) 16:15:22 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000, 0x405) 16:15:23 executing program 4: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) mkdir(&(0x7f000002b000)='./file0\x00', 0x0) mount(0x0, &(0x7f000002c000)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x4040, 0x0) finit_module(r0, &(0x7f0000000000)='ramfs\x00', 0x1) r2 = creat(&(0x7f0000002500)='./file0/bus\x00', 0xcebb6074bb566d03) open$dir(&(0x7f0000eb6000)='./file0/bus\x00', 0x0, 0x0) fcntl$setlease(r2, 0x400, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'veth0\x00', &(0x7f0000000240)=ANY=[@ANYBLOB="0005000000087f0000090028152bc5600f0ed100420100ffff76a7bf2afa9d18370affff7f070000000000000028ed7300000000000000"]}) r3 = getpgrp(0x0) ptrace(0x8, r3) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x0, 0x132910, r0, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r2, 0x84, 0x1c, &(0x7f0000000180), &(0x7f0000000200)=0x4) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffffffe7, 0x0, @offset, 0x4}) 16:15:23 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x400100000000000, 0x0, @offset, 0x4}) 16:15:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x2, 0x405) 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x4001000, 0x0, @offset, 0x4}) 16:15:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7ffffffffffffff, 0x0, @offset, 0x4}) 16:15:23 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x541b, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00, 0x405) [ 342.243225] audit: type=1804 audit(1543162523.263:65): pid=15318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor4" name="/root/syzkaller-testdir217439027/syzkaller.MVfEwQ/273/file0/bus" dev="ramfs" ino=47825 res=1 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffffffffffffffe7, 0x0, @offset, 0x4}) 16:15:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 342.343475] audit: type=1400 audit(1543162523.263:66): avc: denied { map } for pid=15317 comm="syz-executor4" path="socket:[47822]" dev="sockfs" ino=47822 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=unix_dgram_socket permissive=1 16:15:23 executing program 4: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) io_setup(0x40d, &(0x7f0000000100)=0x0) write$binfmt_elf32(r1, &(0x7f00000001c0)=ANY=[@ANYRES16, @ANYRESHEX=r1, @ANYRES16=r1, @ANYPTR=&(0x7f00000002c0)=ANY=[@ANYBLOB="27949b2e87dd2d4141384fc35d41198a97caee64197424403565a9ef6f864e73836155bda88b372327555c69f3613db2ca448f582393d1f406cc3cb4cb5ace84fa4852cbd62f10504539901d5311093a33cdde8c6b50e7c65c94fbbb2193b1d5826571fc3f1f55e18983b2194d9461550564ba7bc506c5bc20db21a0e900d32c2439c792517557d99ca08e0d9290f5fa4ef2035bd6d68f2f4aa2bead", @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=r0], @ANYPTR64, @ANYRES16], 0x28) close(r0) io_submit(r2, 0x1400, &(0x7f0000000600)=[&(0x7f0000000180)={0x0, 0x0, 0x0, 0x8, 0x0, r1, &(0x7f0000000140), 0x700000000000}]) r3 = dup2(r1, r1) ioctl$UI_DEV_CREATE(r3, 0x5501) 16:15:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x5000000, 0x0, @offset, 0x4}) 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x1000000, 0x0, @offset, 0x4}) 16:15:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xffffffff00000000, 0x405) 16:15:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x4b49, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x400000000000000, 0x405) 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x500, 0x0, @offset, 0x4}) 16:15:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x4001000, 0x0, @offset, 0x4}) 16:15:23 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000140)=@in6={0xa, 0x0, 0x0, @dev}, 0x1c, &(0x7f0000001600)=[{&(0x7f0000000000)='[', 0x1}], 0x1, &(0x7f00000001c0)=[@dstaddrv6={0x20, 0x84, 0x8, @local}, @dstaddrv4={0x18, 0x84, 0x7, @remote}], 0x38}, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000080)=[{&(0x7f0000000180)=@in={0x2, 0x0, @local={0xac, 0x14, 0xffffffffffffffff}}, 0x10, &(0x7f0000562000), 0x0, &(0x7f00000c3000)=ANY=[@ANYBLOB="20939000000000008400000002000000000041020000000000000000", @ANYRES32=0x0], 0x20}], 0x4924924924924d0, 0x0) 16:15:23 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0285629, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:23 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x1000000000000, 0x405) 16:15:23 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x6000000, 0x0, @offset, 0x4}) 16:15:23 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffffffe7, 0x0, @offset, 0x4}) 16:15:24 executing program 4: ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={"766574000000000000000000bd6800"}) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0xff, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x3, 0x3c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = creat(&(0x7f0000000700)='./bus\x00', 0x0) setpgid(0x0, 0x0) ftruncate(r0, 0x8200) r1 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r2 = getpid() r3 = getpgid(0x0) rt_tgsigqueueinfo(r2, r3, 0x1f, &(0x7f0000000100)={0x10, 0x2, 0x8, 0x8}) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x11, r1, 0x0) perf_event_open(&(0x7f0000aaa000)={0x2, 0x70, 0x857, 0x2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r4 = socket$inet6(0xa, 0x400000000001, 0x0) ioctl$int_in(r4, 0x5421, &(0x7f0000000040)=0x8ad) setsockopt$inet6_tcp_int(r1, 0x6, 0x19, &(0x7f00000001c0)=0x3, 0x4) r5 = dup(r4) setsockopt$inet6_tcp_int(r5, 0x6, 0x20000000000002, &(0x7f00007b1000)=0x81, 0x4) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000080)=0x412, 0x4) setsockopt$inet6_int(r4, 0x29, 0x35, &(0x7f00000000c0)=0x6, 0x4) ioctl$PPPIOCGL2TPSTATS(r4, 0x80487436, &(0x7f0000000200)="b070104d866e9b7376d2b4a766e126b15a82efc121eb12a11b0c5038") setns(r5, 0x1ffffffb) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000100)={'bridge_slave_0\x00', 0x1502}) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x7) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x17, &(0x7f0000000140)=0x5, 0x4) sendto$inet6(r4, &(0x7f0000e77fff), 0x2bd, 0x20000008, &(0x7f00008d4fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r6 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) sendfile(r5, r6, &(0x7f0000d83ff8), 0x8000fffffffe) 16:15:24 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x80086601, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x5000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x300, 0x0, @offset, 0x4}) 16:15:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xfffffff6, 0x405) 16:15:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7, 0x0, @offset, 0x4}) 16:15:24 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40086602, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x3, 0x0, @offset, 0x4}) 16:15:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x9, 0x405) 16:15:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x5, 0x0, @offset, 0x4}) 16:15:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x4001000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 4: socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000140)={&(0x7f0000ffb000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000ffc000/0x2000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffb000/0x1000)=nil, &(0x7f0000000200)="2333164d7749e8b267f6787159c84dbd6c3211beb0f7ba678782f785be350b3f0b5e47cff7475066e196da2b4b29c0385646c73bb7d01e20e038265f9c13a096afdd3a62ee91ea094710f70d598deed92ed7810afa21063852b97a83ac07ae05c6ae5400627626b864c89773825ad5160162fb4b940e3b2b64af2cc9243285f5248715657c4b29f4393e7a4b6944a49f9df3e77a931377b752322883314257eb7b46ef6458b23cfe1023d82df4410c839721f3eb0940a54daba6632356a12f806504642f57f534a652390595300f10010a398ee2533af69380ee49740eda8da6", 0xe0, r0}, 0x68) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={&(0x7f00000000c0)={0x10, 0x34000}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="20000000100029080000000000000000030000000c0002000800000000000000cc7ba27f08e16ed1c0ed458725cc"], 0x20}}, 0x0) 16:15:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x300000000000000, 0x0, @offset, 0x4}) 16:15:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfffffffffffffdfd, 0x0, @offset, 0x4}) 16:15:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x200000000000000, 0x405) 16:15:24 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0045878, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b, 0x405) 16:15:24 executing program 4: r0 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000180)={0x0}) ioctl$DRM_IOCTL_DMA(r0, 0xc0406429, &(0x7f0000000380)={r1, 0x2, &(0x7f0000000200)=[0x9, 0x5], &(0x7f00000002c0)=[0xfffffffffffffffe, 0x3, 0x6, 0x8, 0x4, 0xd7, 0x101, 0x401, 0x3], 0x0, 0x6, 0x40, &(0x7f0000000300)=[0x2, 0x3ff, 0x0, 0xd6, 0x4, 0x4], &(0x7f0000000340)=[0x80, 0x7f, 0x9, 0x2]}) openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000680)='/selinux/enforce\x00', 0x400, 0x0) vmsplice(0xffffffffffffffff, &(0x7f0000000b40)=[{&(0x7f0000000ac0)}], 0x1, 0x0) ioctl$RTC_VL_READ(0xffffffffffffffff, 0x80047013, &(0x7f00000001c0)) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000000)={"7465616d30001000", 0xffffffffffbfdffc}) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(0xffffffffffffffff, 0x5386, &(0x7f0000000280)) ioctl$SNDRV_TIMER_IOCTL_GSTATUS(0xffffffffffffffff, 0xc0505405, &(0x7f0000000100)={{0x0, 0x3, 0xffffffffffff09b9, 0x0, 0x3}}) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000000740)=@nat={"6e6174000000000000000300", 0x19, 0x1, 0x238, [0x200003c0, 0x0, 0x0, 0x200003f0, 0x20000420], 0x0, &(0x7f0000000240), &(0x7f00000003c0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffe, 0x1, [{{{0x3, 0x0, 0x800, 'ifb0\x00', 'dummy0\x00', 'ip_vti0\x00', 'ip6tnl0\x00', @remote, [], @broadcast, [], 0xf0, 0x170, 0x1a8, [@ip={'ip\x00', 0x20, {{@loopback, @dev}}}, @realm={'realm\x00', 0x10}]}, [@arpreply={'arpreply\x00', 0x10, {{@local}}}, @common=@RATEEST={'RATEEST\x00', 0x20, {{'syz1\x00'}}}]}, @snat={'snat\x00', 0x10, {{@dev}}}}]}]}, 0x2b0) lsetxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f00000000c0)='./file0\x00', 0x8, 0x2) 16:15:24 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x100004, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x3, 0x0, @offset, 0x4}) 16:15:24 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40045612, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:24 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffffffffffff, 0x0, @offset, 0x4}) 16:15:24 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4000000, 0x405) [ 343.920107] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 16:15:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xfdfdffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x700000000000000, 0x0, @offset, 0x4}) 16:15:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x600000000000000, 0x0, @offset, 0x4}) [ 343.982443] x_tables: eb_tables: realm match: used from hooks POSTROUTING, but only valid from INPUT/FORWARD/OUTPUT/POSTROUTING 16:15:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145667, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0xfffffffffffffe9b, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={0x0, 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r2 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, 0x0) socket$kcm(0x11, 0x4000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r5, &(0x7f0000000500)="e5a8655aaf62397a06f9cf7b5b26fbf2566d9d5c61b2826bed9a012ff25f0406dd"}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x800448d3, &(0x7f0000001140)={'veth0_Yo_bridge\x00'}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x24, 0x8, 0x15, 0x9, 0x0, 0x6, 0x9}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 16:15:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x4, 0x405) 16:15:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x1000000, 0x0, @offset, 0x4}) 16:15:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x7000000, 0x0, @offset, 0x4}) 16:15:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc058560f, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x3000000, 0x0, @offset, 0x4}) 16:15:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x6b6b6b00000000, 0x405) 16:15:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x5000000, 0x0, @offset, 0x4}) 16:15:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x5452, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x300000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x9000000, 0x405) 16:15:25 executing program 4: r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000340)='/proc/sys/net/ipv4/vs/drop_packet\x00', 0x2, 0x0) perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000400)}}, 0x0, 0xbfffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000380)=@in={0x2, 0x4e21, @dev}, 0xfffffffffffffe9b, &(0x7f0000000080), 0x0, &(0x7f0000002940), 0x0, 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x5, 0x0, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0xfffffffffffffffc, 0xfb, &(0x7f0000000200)=""/251}, 0x48) perf_event_open(&(0x7f00000027c0)={0x0, 0x70, 0x0, 0x767e, 0x400, 0x0, 0x0, 0x81, 0x0, 0x0, 0x2, 0x0, 0x2dd, 0x1, 0x6, 0x8, 0x1, 0x7, 0xfffffffffffffffb, 0x8, 0x20, 0xffffffffffffff80, 0x1ff, 0x75a0, 0x8d, 0x7fff, 0x9, 0xd7e, 0x6, 0x0, 0xefc, 0x100000000, 0x5b5, 0x6, 0x4, 0xee10, 0x0, 0xffffffff, 0x0, 0x7, 0x3, @perf_bp={0x0, 0x2}, 0x10, 0x7, 0x21e, 0x5, 0x0, 0x8, 0x3f}, 0x0, 0xc, 0xffffffffffffffff, 0x2) getpid() r2 = perf_event_open(&(0x7f0000002740)={0x2, 0x70, 0x0, 0x2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000440)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, 0x0) getpid() ioctl$PERF_EVENT_IOC_SET_BPF(r2, 0x40042408, r1) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080)='/dev/net/tun\x00', 0x100, 0x0) ioctl$TUNSETVNETHDRSZ(r3, 0x400454d8, &(0x7f0000000100)=0x3f) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000080), 0x0}, 0x18) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r4, 0x89f0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'bcsh0\x00', 0x1000000001}) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_SET_FILTER(r6, 0x8923, 0x0) socket$kcm(0x11, 0x4000000002, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000300), 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000005c0)={r5, &(0x7f0000000500)="e5a8655aaf62397a06f9cf7b5b26fbf2566d9d5c61b2826bed9a012ff25f0406dd"}, 0x10) setsockopt$inet_tcp_int(r5, 0x6, 0x0, 0x0, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x3, 0x6) ioctl$KVM_SET_NESTED_STATE(0xffffffffffffffff, 0x4080aebf, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(r7, 0x800448d3, &(0x7f0000001140)={'veth0_Yo_bridge\x00'}) ioctl$RTC_ALM_SET(r0, 0x40247007, &(0x7f0000000080)={0x0, 0x24, 0x8, 0x15, 0x9, 0x0, 0x6, 0x9}) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) 16:15:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0405610, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x5, 0x0, @offset, 0x4}) 16:15:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffe7, 0x0, @offset, 0x4}) 16:15:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x6, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x100004, 0x0, @offset, 0x4}) 16:15:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x900, 0x405) 16:15:25 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0205647, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x600, 0x0, @offset, 0x4}) 16:15:25 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffffffffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:25 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x404) 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40049409, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 4: perf_event_open(&(0x7f0000000000)={0x2, 0x70, 0xf0, 0x80000001, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0xf7fffffffffffffd, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x977, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000000180)}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'bridge0\x00'}) getpid() r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)="2f67726f75702e7374619fd474002b044a7b09ab0b0274e10985a6fa15b35ba69421f204dec5668a06000000b90ff860e01f262bafac750a6d5ce259cb61ea0cd94458583eef2fc597ea93a7dec9b4168e468be0576d1d0ebf8bc4478f8ed85b547c6924880400000000000000901e428b98add1375f51e135848fea98c6e3574511e0c61ff22ff61f", 0x2761, 0x0) fsync(r0) recvmsg$kcm(r1, &(0x7f0000001500)={&(0x7f0000000380)=@can={0x1d, 0x0}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000440)=""/124, 0x7c}], 0x1, &(0x7f0000000500)=""/4096, 0x1000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0xa, 0x0, &(0x7f00000000c0), &(0x7f0000000300)='GPL\x00', 0x0, 0x1a, &(0x7f0000000340)=""/26, 0x0, 0x1, [], r2, 0x9}, 0x48) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x4030582a, &(0x7f0000000000)) ioctl$TUNSETVNETLE(0xffffffffffffffff, 0x400454dc, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000001700)={0x0, 0x2, &(0x7f0000002bc0)=@raw=[@alu={0x7, 0xfffffffffffffff7, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}], &(0x7f0000001780)='syzkaller\x00', 0x0, 0x8, &(0x7f0000002b40)=""/8, 0x40f00, 0xfffffffffffffffe, [], 0x0, 0xf}, 0x48) 16:15:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfffffffffffffdfd, 0x0, @offset, 0x4}) 16:15:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffffffffffffffe7, 0x0, @offset, 0x4}) 16:15:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x700000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x409) 16:15:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0205649, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x7, 0x0, @offset, 0x4}) 16:15:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffff00000000, 0x0, @offset, 0x4}) 16:15:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/mixer\x00', 0x300, 0x0) bind$pptp(r1, &(0x7f0000000100)={0x18, 0x2, {0x0, @rand_addr=0x4}}, 0x1e) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x3e8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)={0x16, 0x0, 0x0, 0x2}, 0x2c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={r2, 0x0, 0x0}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000000)={r2, 0x0, 0x0}, 0x18) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffffffffffff, 0x0, @offset, 0x4}) 16:15:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfffffdfd, 0x0, @offset, 0x4}) 16:15:26 executing program 4: r0 = socket$inet6(0xa, 0x803, 0x4) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) r2 = memfd_create(&(0x7f00000001c0)='/dev/vcs\x00', 0x5) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f00000002c0)={0x9e, &(0x7f0000000200)=""/158}) shutdown(r1, 0x2) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vcs\x00', 0x40, 0x0) mq_timedreceive(r3, &(0x7f0000000040)=""/236, 0xec, 0x2, 0x0) ppoll(&(0x7f00000007c0)=[{r1}], 0xf, &(0x7f0000000800)={0x77359400}, &(0x7f0000000840), 0x8) 16:15:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffe7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0045878, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 345.428572] audit: type=1400 audit(1543162526.453:67): avc: denied { map_write } for pid=15660 comm="syz-executor5" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 16:15:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000000000)='/dev/snd/controlC#\x00', 0x101, 0x400101200) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x300000000000000, 0x0, @offset, 0x4}) 16:15:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x7, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7ffffff, 0x0, @offset, 0x4}) 16:15:26 executing program 4: r0 = socket$netlink(0x10, 0x3, 0x8000000004) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/autofs\x00', 0x4000, 0x0) ioctl$VIDIOC_ENCODER_CMD(r1, 0xc028564d, &(0x7f0000000040)={0x3, 0x1, [0x30, 0xfffffffffffffff9, 0x2, 0xffffffff, 0x9, 0x401, 0x5, 0xfff]}) writev(r0, &(0x7f0000e11ff0)=[{&(0x7f0000000100)="580000001400192340834b80040d8c560a02000000ff81004e227e00000058000b4824ca944f64009400050028925aa8000000000000008000f0ffffffff09000000fff5dd0000000b0001000c0c0c00fcff0000040e05a5", 0x58}], 0x1) 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x2, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0xfffffffffffffffe, 0x405) getsockopt$inet6_buf(r1, 0x29, 0x23, &(0x7f0000000000)=""/193, &(0x7f0000000100)=0xc1) 16:15:26 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x700, 0x0, @offset, 0x4}) 16:15:26 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x500000000000000, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfd, 0x0, @offset, 0x4}) 16:15:26 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0x40087602, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:26 executing program 4: perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f0000000640)="636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0x5) r1 = syz_open_dev$sndseq(&(0x7f0000050000)='/dev/snd/seq\x00', 0x0, 0x2) r2 = dup2(r1, r0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r2, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r2, 0x40bc5311, &(0x7f0000000000)={0x80, 0x1, "636c69656e000000000000040002000000000000000000000000000000000000000000000800", 0xffffffff90000004, "7fd82d5e02ca3901", "88e7ed00007fff051eae961ef6c6992b7e6e560000f9fff77711be18a3d918e0"}) ioctl$UFFDIO_ZEROPAGE(r0, 0xc020aa04, &(0x7f0000000180)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}}) write$sndseq(r0, &(0x7f0000042f70)=[{0x0, 0xfffffffe, 0x0, 0x0, @tick, {}, {}, @addr}, {0x0, 0x0, 0x0, 0x0, @tick, {0x6}, {}, @addr}], 0xffffffbd) r3 = syz_open_procfs(0x0, &(0x7f0000000480)="706167656d6170009ccdbf3aa4e1992bfaba6d9f2b8806b90303ff6615635a9a6b066001187ba946714b0d6fd092d7e8bf0d99945a373f3f01a5c94a90a7a704e9deb9b4289e818102bbf232c3d3fedf8a1ea267c5225ad60bd08e6615c189e53672ecf39e25f58db3e79761b6556ba597f306019742fefe8173bd59") ioctl$TCXONC(r3, 0x540a, 0x4) keyctl$clear(0x7, 0x0) fcntl$getflags(r0, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/kvm\x00', 0x0, 0x0) 16:15:26 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) r1 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000000)) ftruncate(r0, 0x4) 16:15:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0xe7ffffff, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xffe7, 0x0, @offset, 0x4}) 16:15:27 executing program 5: r0 = openat$vhci(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vhci\x00', 0x60000, 0x0) ioctl$KVM_S390_INTERRUPT_CPU(r0, 0x4010ae94, &(0x7f0000000040)={0x8, 0xff, 0x10000}) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7, 0x0, @offset, 0x4}) 16:15:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145696, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7ff, 0x0, @offset, 0x4}) 16:15:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x600, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x6, 0x0, @offset, 0x4}) 16:15:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x2, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xfdfdffff, 0x0, @offset, 0x4}) 16:15:27 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x6, 0x0, @offset, 0x4}) 16:15:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x200000000000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f0000000040)=0x3) r1 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f0000000080)={'syz', 0x2}, &(0x7f00000000c0)="2eb3c424d92e1681eb8f03cc1af52ebb07b3eb3d2ccee0dff81785c9868893fd3a54d7220e85005de15b75906bf305ed5787a5c386", 0x35, 0xfffffffffffffff8) keyctl$get_security(0x11, r1, &(0x7f0000000100)=""/226, 0xe2) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x4a0000) 16:15:27 executing program 4: r0 = syz_open_dev$vbi(&(0x7f0000000140)='/dev/vbi#\x00', 0xffffffffffffffff, 0x2) ioctl$VIDIOC_S_CTRL(r0, 0xc008561c, &(0x7f0000000040)={0x2, 0xffffffbf}) 16:15:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x6000000, 0x0, @offset, 0x4}) 16:15:27 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0xe7ff, 0x0, @offset, 0x4}) 16:15:27 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x700000000000000, 0x0, @offset, 0x4}) 16:15:27 executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000040), &(0x7f0000000080)=0x302) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x2, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r2 = syz_open_dev$vcsn(&(0x7f0000000280)='/dev/vcs#\x00', 0x8, 0x10000) ioctl$KVM_REINJECT_CONTROL(r2, 0xae71, &(0x7f00000002c0)={0x4d}) r3 = accept(r0, &(0x7f00000000c0)=@nfc, &(0x7f0000000000)=0x80) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000140)={0x0, 0x7}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={r4, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x4e20, 0x7, @empty, 0x9}]}, &(0x7f0000000240)=0x10) 16:15:27 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0xffffffe7, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:27 executing program 5: socketpair(0x2, 0x80003, 0x101, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000040)="048d8ad6c632ac8afaa6af692e28a30ae4ca75b35d8445fe746305d7f20cd7584994fae29ef3c30ca13f835f0b28c10946d515d39b") r2 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0xfffffffffffffff7, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f00000001c0)=0x9) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="00000000b82c2f12ec5f7c69ae8a9a8be75ae35547469f3d3b00023d8f6604eef3bd1f3b27fd83c6b411868eea88f6fcf62d6ddb0000000000000000000000000000"], &(0x7f0000000100)=0x8) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r3, 0x10000}, 0x8) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x700000000000000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:28 executing program 2: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x100000000000000, 0x0, @offset, 0x4}) 16:15:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) 16:15:28 executing program 1: r0 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r0, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r0, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x100004, 0x0, @offset, 0x4}) 16:15:28 executing program 3: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0145608, &(0x7f00000001c0)={0x2000000, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) 16:15:28 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)="7374617409c0d2febcf9df2deac8c177ff171248e91193513049f831550d6f7de66cf637bdbf1311920c8a26eda4dcc3783f9db5116b34d31b0512a5608aaff01e7952340cd6fd00000000", 0x275a, 0x0) r1 = creat(&(0x7f0000000140)='./file0\x00', 0x0) fallocate(r1, 0x0, 0x40000, 0xfff) fallocate(r0, 0x0, 0x0, 0x110001) mq_timedreceive(r1, &(0x7f0000000180)=""/186, 0xba, 0x9, &(0x7f0000000100)={0x77359400}) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000040)={0x0, r1, 0x15, 0x8}) ioctl$UI_GET_SYSNAME(r1, 0x8040552c, &(0x7f0000000240)) 16:15:28 executing program 0: r0 = socket$inet6(0xa, 0x803, 0x3) ioctl(r0, 0x1000008912, &(0x7f0000000140)="0a5c2d023c126285718070") r1 = openat$vim2m(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video35\x00', 0x2, 0x0) ioctl$VIDIOC_CREATE_BUFS(r1, 0xc100565c, &(0x7f00000002c0)={0x0, 0x100000001, 0x1, {0x1, @vbi={0x0, 0x0, 0x0, 0x0, [0x0, 0x96000]}}}) ioctl$VIDIOC_QUERYBUF(r1, 0xc0585609, &(0x7f00000001c0)={0x0, 0x1, 0x4, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x4001000, "24550ec4"}, 0x0, 0x0, @offset, 0x4}) [ 347.230163] WARNING: CPU: 0 PID: 15830 at drivers/dma-buf/dma-buf.c:992 dma_buf_vunmap+0x1bb/0x220 [ 347.235005] kobject: 'loop0' (000000008a713ab2): kobject_uevent_env [ 347.239491] Kernel panic - not syncing: panic_on_warn set ... [ 347.239510] CPU: 0 PID: 15830 Comm: syz-executor3 Not tainted 4.20.0-rc3+ #128 [ 347.239519] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 347.239524] Call Trace: [ 347.239559] dump_stack+0x244/0x39d [ 347.239580] ? dump_stack_print_info.cold.1+0x20/0x20 [ 347.239649] panic+0x2ad/0x55c [ 347.239667] ? add_taint.cold.5+0x16/0x16 [ 347.246346] kobject: 'loop0' (000000008a713ab2): fill_kobj_path: path = '/devices/virtual/block/loop0' [ 347.251952] ? __warn.cold.8+0x5/0x45 [ 347.251966] ? __warn+0xe8/0x1d0 [ 347.251984] ? dma_buf_vunmap+0x1bb/0x220 [ 347.251998] __warn.cold.8+0x20/0x45 [ 347.252015] ? rcu_softirq_qs+0x20/0x20 [ 347.314639] kobject: 'loop5' (000000006fa74a86): kobject_uevent_env [ 347.315772] ? dma_buf_vunmap+0x1bb/0x220 [ 347.315788] report_bug+0x254/0x2d0 [ 347.315868] do_error_trap+0x11b/0x200 [ 347.315902] do_invalid_op+0x36/0x40 [ 347.334357] kobject: 'loop5' (000000006fa74a86): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 347.337661] ? dma_buf_vunmap+0x1bb/0x220 [ 347.337678] invalid_op+0x14/0x20 [ 347.337693] RIP: 0010:dma_buf_vunmap+0x1bb/0x220 [ 347.337708] Code: 00 00 00 00 e8 c6 25 1c fd 4c 89 f7 e8 6e 51 77 03 e8 b9 25 1c fd 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 a5 25 1c fd <0f> 0b eb e3 e8 9c 25 1c fd 0f 0b e8 95 25 1c fd 0f 0b e8 8e 25 1c [ 347.337716] RSP: 0018:ffff88817dc37948 EFLAGS: 00010293 [ 347.337729] RAX: ffff88817ef56280 RBX: 0000000000000000 RCX: ffffffff8558e3c0 [ 347.337737] RDX: 0000000000000000 RSI: ffffffff8463654b RDI: 0000000000000000 [ 347.337747] RBP: ffff88817dc37978 R08: ffff88817ef56280 R09: ffffed103aeb4aa6 [ 347.337773] R10: ffff88817dc37ad0 R11: ffff8881d75a5537 R12: ffffc9001333a000 [ 347.337782] R13: ffff88817c0a1240 R14: ffff88817c0a12a8 R15: ffff8881ba03f300 [ 347.337881] ? __vb2_plane_dmabuf_put.isra.5+0xc0/0x310 [ 347.425592] ? dma_buf_vunmap+0x1bb/0x220 16:15:28 executing program 5: r0 = syz_open_pts(0xffffffffffffff9c, 0x500) fcntl$F_GET_FILE_RW_HINT(r0, 0x40d, &(0x7f0000000000)) r1 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f00000001c0)=0x9) r2 = syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000000c0)={r2, 0x50, &(0x7f0000000040)={0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)=r3, 0x4) 16:15:28 executing program 5: syz_open_dev$sndctrl(&(0x7f0000000080)='/dev/snd/controlC#\x00', 0x6, 0x101000) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) [ 347.429765] ? dma_buf_vunmap+0x1bb/0x220 [ 347.433969] vb2_vmalloc_detach_dmabuf+0x5a/0x80 [ 347.438735] ? vb2_vmalloc_map_dmabuf+0x80/0x80 [ 347.443415] __vb2_plane_dmabuf_put.isra.5+0x122/0x310 [ 347.448709] __vb2_queue_free+0x7f3/0xa30 [ 347.452929] ? v4l2_m2m_job_finish+0x4c0/0x4c0 [ 347.457561] ? __vb2_plane_dmabuf_put.isra.5+0x310/0x310 [ 347.462137] kobject: 'loop5' (000000006fa74a86): kobject_uevent_env [ 347.463068] ? vidioc_querycap+0xd0/0xd0 [ 347.463087] vb2_core_queue_release+0x62/0x80 16:15:28 executing program 4: r0 = socket$inet6(0xa, 0x5, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6b6, 0x1, 0x80000, 0x4, 0x0}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f00000000c0)={r1, 0xb, 0x30, 0x4d7, 0x2}, &(0x7f0000000180)=0x18) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ptmx\x00', 0x2, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000380)={r2, 0xfffffffffffffffa}, 0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f00000001c0)={r2, 0xbbc}, 0x8) write(r3, &(0x7f0000000140)="9813", 0x2) ioctl$TIOCGSID(r3, 0x5429, &(0x7f0000000240)=0x0) clock_nanosleep(0x0, 0x1, &(0x7f0000000300)={0x77359400}, &(0x7f0000000340)) sched_getattr(r4, &(0x7f0000000280), 0x30, 0x0) r5 = syz_open_dev$adsp(&(0x7f00000003c0)='/dev/adsp#\x00', 0xffffffffffff8000, 0x600180) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f0000000400)={{0x3, 0x3, 0xfff, 0x1, 0x128}}) r6 = syz_open_pts(r3, 0x0) write$binfmt_aout(r6, &(0x7f0000001000)=ANY=[], 0x0) syz_open_dev$adsp(&(0x7f0000000200)='/dev/adsp#\x00', 0x9, 0x100) ioctl$TCSETSF(r6, 0x5412, &(0x7f0000000040)={0x0, 0x0, 0x191df908, 0xfffffffffffffffe, 0xa, 0x0, 0x0, 0x0, 0x207, 0x0, 0x0, 0x6}) ioctl$FS_IOC_GETFLAGS(r6, 0x80086601, &(0x7f00000002c0)) [ 347.463105] vb2_queue_release+0x15/0x20 [ 347.463122] v4l2_m2m_ctx_release+0x1e/0x35 [ 347.463140] vim2m_release+0xe6/0x150 [ 347.473338] kobject: 'loop5' (000000006fa74a86): fill_kobj_path: path = '/devices/virtual/block/loop5' [ 347.473636] v4l2_release+0x224/0x3a0 [ 347.503480] ? dev_debug_store+0x140/0x140 [ 347.507721] __fput+0x385/0xa30 [ 347.511034] ? get_max_files+0x20/0x20 [ 347.514928] ? trace_hardirqs_on+0xbd/0x310 [ 347.519279] ? kasan_check_read+0x11/0x20 [ 347.523436] ? task_work_run+0x1af/0x2a0 [ 347.527514] ? trace_hardirqs_off_caller+0x310/0x310 [ 347.532629] ? filp_close+0x1cd/0x250 [ 347.536206] kobject: 'loop4' (00000000bddbf1e2): kobject_uevent_env [ 347.536441] ____fput+0x15/0x20 [ 347.546140] task_work_run+0x1e8/0x2a0 [ 347.546679] kobject: 'loop4' (00000000bddbf1e2): fill_kobj_path: path = '/devices/virtual/block/loop4' [ 347.550058] ? task_work_cancel+0x240/0x240 [ 347.550078] ? copy_fd_bitmaps+0x210/0x210 [ 347.550093] ? do_syscall_64+0x9a/0x820 [ 347.550129] exit_to_usermode_loop+0x318/0x380 [ 347.550161] ? __bpf_trace_sys_exit+0x30/0x30 [ 347.550184] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 347.586704] do_syscall_64+0x6be/0x820 [ 347.590617] ? entry_SYSCALL_64_after_hwframe+0x3e/0xbe [ 347.595994] ? syscall_return_slowpath+0x5e0/0x5e0 [ 347.600936] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.605791] ? trace_hardirqs_on_caller+0x310/0x310 [ 347.610912] ? prepare_exit_to_usermode+0x291/0x3b0 [ 347.615946] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 347.621317] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 347.626512] RIP: 0033:0x411021 16:15:28 executing program 5: r0 = syz_open_dev$sndctrl(&(0x7f0000006000)='/dev/snd/controlC#\x00', 0x0, 0x0) r1 = memfd_create(&(0x7f0000000040)=':\x00', 0x7) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) syz_open_dev$binder(&(0x7f0000000000)='/dev/binder#\x00', 0x0, 0x800) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r0, 0x40045532, &(0x7f00000001c0)=0x9) syz_open_dev$sndpcmp(&(0x7f000000afee)='/dev/snd/pcmC#D#p\x00', 0x0, 0x405) open$dir(&(0x7f00000000c0)='./file0\x00', 0x2000, 0x82) [ 347.629752] Code: 75 14 b8 03 00 00 00 0f 05 48 3d 01 f0 ff ff 0f 83 34 19 00 00 c3 48 83 ec 08 e8 0a fc ff ff 48 89 04 24 b8 03 00 00 00 0f 05 <48> 8b 3c 24 48 89 c2 e8 53 fc ff ff 48 89 d0 48 83 c4 08 48 3d 01 [ 347.648663] RSP: 002b:00007ffd0df49930 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 347.656380] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 0000000000411021 [ 347.663658] RDX: 0000000000000000 RSI: 0000000000730938 RDI: 0000000000000006 [ 347.670934] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 347.678214] R10: 00007ffd0df49860 R11: 0000000000000293 R12: 0000000000000000 [ 347.685500] R13: 0000000000000001 R14: 000000000000014b R15: 0000000000000003 [ 347.693972] Kernel Offset: disabled [ 347.697646] Rebooting in 86400 seconds..