ck_print_info.cold+0x20/0x20 [ 1879.141689] should_fail.cold+0xa/0x15 [ 1879.145603] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1879.150732] ? ___might_sleep+0x1e7/0x310 [ 1879.154895] ? arch_local_save_flags+0x50/0x50 [ 1879.159488] ? trace_hardirqs_on+0xbd/0x310 [ 1879.163834] __should_failslab+0x121/0x190 [ 1879.168101] should_failslab+0x9/0x14 [ 1879.171917] kmem_cache_alloc_node+0x265/0x710 [ 1879.176577] ? __local_bh_enable_ip+0x15a/0x270 [ 1879.181274] ? _raw_spin_unlock_bh+0x31/0x40 [ 1879.185792] __alloc_skb+0xf4/0x730 [ 1879.189439] ? __local_bh_enable_ip+0x15a/0x270 [ 1879.194140] ? skb_scrub_packet+0x440/0x440 [ 1879.198554] ? netlink_insert+0x103/0x240 [ 1879.202742] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1879.208295] ? netlink_autobind.isra.0+0x228/0x310 [ 1879.213250] netlink_sendmsg+0xb11/0xf90 [ 1879.217327] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1879.222889] ? netlink_unicast+0x770/0x770 [ 1879.227209] ? selinux_socket_sendmsg+0x36/0x40 [ 1879.227227] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1879.227243] ? security_socket_sendmsg+0x93/0xc0 [ 1879.227259] ? netlink_unicast+0x770/0x770 [ 1879.227304] sock_sendmsg+0xdd/0x130 [ 1879.227327] ___sys_sendmsg+0x7ec/0x910 [ 1879.227350] ? copy_msghdr_from_user+0x570/0x570 [ 1879.237541] ? iterate_fd+0x4b0/0x4b0 [ 1879.237575] ? lock_downgrade+0x910/0x910 [ 1879.237603] ? __fget_light+0x2db/0x420 [ 1879.237623] ? fget_raw+0x20/0x20 [ 1879.237647] ? __mutex_unlock_slowpath+0x195/0x870 [ 1879.279318] ? wait_for_completion+0x810/0x810 [ 1879.283893] ? __fdget+0x1b/0x20 [ 1879.287248] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1879.292773] ? sockfd_lookup_light+0xc2/0x160 [ 1879.297261] __sys_sendmsg+0x112/0x270 [ 1879.301142] ? __ia32_sys_shutdown+0x80/0x80 [ 1879.305556] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1879.310913] ? trace_hardirqs_off_caller+0x300/0x300 [ 1879.316006] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1879.320773] __x64_sys_sendmsg+0x78/0xb0 [ 1879.324836] do_syscall_64+0x1a3/0x800 [ 1879.328729] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1879.333683] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1879.338694] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1879.343553] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1879.348744] RIP: 0033:0x458099 [ 1879.351922] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1879.370815] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1879.378518] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1879.385786] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1879.393055] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1879.400314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1879.407570] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:09:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:18 executing program 5: r0 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x20000, 0x0) ioctl$BLKIOOPT(r0, 0x1279, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:18 executing program 4 (fault-call:1 fault-nth:1): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:18 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1881.641564] FAULT_INJECTION: forcing a failure. [ 1881.641564] name failslab, interval 1, probability 0, space 0, times 0 [ 1881.724209] CPU: 0 PID: 11891 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1881.731361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1881.740758] Call Trace: [ 1881.743395] dump_stack+0x1db/0x2d0 [ 1881.747059] ? dump_stack_print_info.cold+0x20/0x20 [ 1881.752106] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1881.757224] ? kasan_slab_alloc+0xf/0x20 [ 1881.761300] ? kmem_cache_alloc_node+0x144/0x710 [ 1881.766085] ? __alloc_skb+0xf4/0x730 [ 1881.769916] ? sock_sendmsg+0xdd/0x130 [ 1881.773838] should_fail.cold+0xa/0x15 [ 1881.777761] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1881.782884] ? ___might_sleep+0x1e7/0x310 [ 1881.787058] ? arch_local_save_flags+0x50/0x50 [ 1881.787078] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1881.787093] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1881.787121] __should_failslab+0x121/0x190 [ 1881.787144] should_failslab+0x9/0x14 [ 1881.810855] kmem_cache_alloc_node_trace+0x270/0x720 [ 1881.816015] ? __alloc_skb+0xf4/0x730 [ 1881.819865] __kmalloc_node_track_caller+0x3d/0x70 [ 1881.824819] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1881.829506] __alloc_skb+0x12d/0x730 [ 1881.833281] ? __local_bh_enable_ip+0x15a/0x270 [ 1881.837971] ? skb_scrub_packet+0x440/0x440 [ 1881.842315] ? netlink_insert+0x103/0x240 [ 1881.846476] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1881.846496] ? netlink_autobind.isra.0+0x228/0x310 [ 1881.846565] netlink_sendmsg+0xb11/0xf90 [ 1881.846581] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1881.846608] ? netlink_unicast+0x770/0x770 [ 1881.870912] ? selinux_socket_sendmsg+0x36/0x40 [ 1881.875601] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1881.881149] ? security_socket_sendmsg+0x93/0xc0 [ 1881.885920] ? netlink_unicast+0x770/0x770 [ 1881.890173] sock_sendmsg+0xdd/0x130 [ 1881.893903] ___sys_sendmsg+0x7ec/0x910 [ 1881.897900] ? copy_msghdr_from_user+0x570/0x570 [ 1881.902676] ? iterate_fd+0x4b0/0x4b0 [ 1881.906509] ? lock_downgrade+0x910/0x910 [ 1881.910695] ? __fget_light+0x2db/0x420 [ 1881.914712] ? fget_raw+0x20/0x20 [ 1881.918214] ? __mutex_unlock_slowpath+0x195/0x870 18:09:18 executing program 5: r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x101040, 0x0) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_PORT(r0, 0xc0a85352, &(0x7f0000000200)={{0x1, 0x9}, 'port1\x00', 0x10, 0x20000, 0x0, 0x3, 0x9, 0x1f, 0x5, 0x0, 0x2, 0x73}) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/ubi_ctrl\x00', 0x400001, 0x0) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000140)=""/76) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_TIOCINQ(r3, 0x541b, &(0x7f0000000040)) 18:09:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x8000a0) 18:09:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1881.923165] ? wait_for_completion+0x810/0x810 [ 1881.927763] ? __fdget+0x1b/0x20 [ 1881.931140] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1881.936691] ? sockfd_lookup_light+0xc2/0x160 [ 1881.941208] __sys_sendmsg+0x112/0x270 [ 1881.945116] ? __ia32_sys_shutdown+0x80/0x80 [ 1881.949558] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1881.954939] ? trace_hardirqs_off_caller+0x300/0x300 [ 1881.960078] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1881.964867] __x64_sys_sendmsg+0x78/0xb0 [ 1881.968949] do_syscall_64+0x1a3/0x800 18:09:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1881.972855] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1881.977805] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1881.982843] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1881.987719] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1881.992918] RIP: 0033:0x458099 [ 1881.996124] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1882.015062] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1882.022786] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1882.030074] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1882.030085] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1882.030095] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1882.030105] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 [ 1882.041301] QAT: Invalid ioctl 18:09:18 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1882.066381] audit: type=1400 audit(1548094158.727:66): avc: denied { getattr } for pid=11904 comm="syz-executor5" path="socket:[267657]" dev="sockfs" ino=267657 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_netfilter_socket permissive=1 [ 1882.095992] QAT: Invalid ioctl 18:09:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x8001a0) 18:09:21 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:21 executing program 4 (fault-call:1 fault-nth:2): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:21 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = creat(&(0x7f0000000040)='./file0\x00', 0x4) ioctl$SCSI_IOCTL_START_UNIT(r1, 0x5) socket$isdn_base(0x22, 0x3, 0x0) 18:09:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1884.750538] FAULT_INJECTION: forcing a failure. [ 1884.750538] name failslab, interval 1, probability 0, space 0, times 0 [ 1884.804574] CPU: 1 PID: 11938 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1884.811723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1884.821081] Call Trace: [ 1884.823704] dump_stack+0x1db/0x2d0 [ 1884.827368] ? dump_stack_print_info.cold+0x20/0x20 [ 1884.832423] should_fail.cold+0xa/0x15 [ 1884.836335] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1884.841463] ? perf_trace_lock_acquire+0x138/0x7d0 [ 1884.846412] ? mark_held_locks+0x100/0x100 [ 1884.850668] ? perf_trace_lock+0x750/0x750 [ 1884.854919] ? __netlink_lookup+0x5fd/0xb50 [ 1884.859260] __should_failslab+0x121/0x190 [ 1884.863517] should_failslab+0x9/0x14 [ 1884.867347] kmem_cache_alloc+0x47/0x710 [ 1884.871433] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1884.876993] skb_clone+0x1c5/0x510 [ 1884.880759] ? skb_split+0x1210/0x1210 [ 1884.884668] ? rcu_softirq_qs+0x20/0x20 [ 1884.888652] ? rcu_read_unlock_special+0x380/0x380 [ 1884.888687] netlink_deliver_tap+0xbc0/0xf40 [ 1884.897991] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1884.898020] ? netlink_remove_tap+0x630/0x630 [ 1884.898036] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 1884.898081] ? kasan_check_write+0x14/0x20 [ 1884.898103] netlink_unicast+0x5e2/0x770 [ 1884.921694] ? netlink_attachskb+0x980/0x980 [ 1884.926125] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1884.931701] netlink_sendmsg+0xa05/0xf90 [ 1884.935775] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1884.941338] ? netlink_unicast+0x770/0x770 [ 1884.945606] ? selinux_socket_sendmsg+0x36/0x40 18:09:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1884.950287] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1884.955838] ? security_socket_sendmsg+0x93/0xc0 [ 1884.960596] ? netlink_unicast+0x770/0x770 [ 1884.960610] sock_sendmsg+0xdd/0x130 [ 1884.960626] ___sys_sendmsg+0x7ec/0x910 [ 1884.960641] ? copy_msghdr_from_user+0x570/0x570 [ 1884.960650] ? iterate_fd+0x4b0/0x4b0 [ 1884.960668] ? lock_downgrade+0x910/0x910 [ 1884.960682] ? __fget_light+0x2db/0x420 [ 1884.960693] ? fget_raw+0x20/0x20 [ 1884.960705] ? __mutex_unlock_slowpath+0x195/0x870 [ 1884.960718] ? wait_for_completion+0x810/0x810 [ 1884.960733] ? __fdget+0x1b/0x20 [ 1884.960743] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1884.960752] ? sockfd_lookup_light+0xc2/0x160 [ 1884.960765] __sys_sendmsg+0x112/0x270 [ 1884.960777] ? __ia32_sys_shutdown+0x80/0x80 [ 1884.960798] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1884.960809] ? trace_hardirqs_off_caller+0x300/0x300 [ 1884.960820] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1884.960833] __x64_sys_sendmsg+0x78/0xb0 [ 1884.960844] do_syscall_64+0x1a3/0x800 [ 1884.960856] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1884.960871] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1884.960885] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1884.960900] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1884.960909] RIP: 0033:0x458099 [ 1884.960928] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1884.960933] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1884.960942] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 18:09:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0xa0008000) 18:09:21 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r0 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/enforce\x00', 0x2180, 0x0) ioctl$TIOCGSID(r0, 0x5429, &(0x7f0000000140)=0x0) ptrace$peek(0x1, r1, &(0x7f0000000180)) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x200) 18:09:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1884.960948] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1884.960953] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1884.960959] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1884.960964] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 [ 1885.074161] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:21 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0xa0018000) 18:09:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) fcntl$getownex(r0, 0x10, &(0x7f0000000100)={0x0, 0x0}) r2 = creat(&(0x7f00000001c0)='./file0\x00', 0x4) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@mcast2, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@multicast2}}, &(0x7f00000003c0)=0xe8) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000400)={{{@in6=@remote, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in=@empty}}, &(0x7f0000000500)=0xe8) getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000540)={{{@in=@multicast1, @in, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{}, 0x0, @in=@local}}, &(0x7f0000000640)=0xe8) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000680)={0x0, 0x0}, &(0x7f00000006c0)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000700)={{{@in6=@local, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@remote}}, &(0x7f0000000800)=0xe8) stat(&(0x7f0000000840)='./file0\x00', &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$system_posix_acl(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)='system.posix_acl_default\x00', &(0x7f0000000900)={{}, {0x1, 0x4}, [{0x2, 0x2, r3}, {0x2, 0x3, r4}, {0x2, 0x2, r5}, {0x2, 0x7, r6}, {0x2, 0x1, r7}], {0x4, 0x5}, [{0x8, 0x1, r8}], {0x10, 0x5}, {0x20, 0x2}}, 0x54, 0x3) ioctl$sock_inet6_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000200)) perf_event_open(&(0x7f0000000080)={0x4, 0x70, 0x7, 0x2, 0x40, 0x7f0, 0x0, 0x9, 0x40000, 0x0, 0x3, 0x0, 0x4, 0x6, 0x7, 0x500000000, 0x9, 0x8001, 0x8, 0x75, 0x144000, 0x20, 0x6, 0x100, 0xe8, 0x101, 0x200, 0x9ba, 0x100, 0x8, 0x5, 0x80000000, 0x6, 0x3f, 0xffffffff, 0x6, 0x80000000, 0x0, 0x0, 0x4, 0x6, @perf_bp={&(0x7f0000000000), 0x1}, 0x2400, 0x7f, 0x4, 0x7, 0x20, 0xfff, 0x714c}, r1, 0xb, r2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000140)={0x0, 0xfffffffffffffffe, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:24 executing program 4 (fault-call:1 fault-nth:3): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x8000a0ffffffff) 18:09:24 executing program 2: r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) [ 1887.826530] FAULT_INJECTION: forcing a failure. [ 1887.826530] name failslab, interval 1, probability 0, space 0, times 0 [ 1887.899238] CPU: 1 PID: 11981 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1887.906377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1887.915737] Call Trace: [ 1887.918346] dump_stack+0x1db/0x2d0 [ 1887.922075] ? dump_stack_print_info.cold+0x20/0x20 [ 1887.927121] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1887.927153] should_fail.cold+0xa/0x15 [ 1887.927182] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1887.927214] ? ___might_sleep+0x1e7/0x310 [ 1887.927240] ? arch_local_save_flags+0x50/0x50 [ 1887.936788] ? selinux_capable+0x36/0x40 [ 1887.936813] __should_failslab+0x121/0x190 [ 1887.958888] should_failslab+0x9/0x14 [ 1887.962706] __kmalloc+0x2dc/0x740 [ 1887.966306] ? ns_capable+0x23/0x30 [ 1887.966329] ? __netlink_ns_capable+0x104/0x140 [ 1887.974610] ? genl_family_rcv_msg+0x98d/0x11a0 [ 1887.979294] genl_family_rcv_msg+0x98d/0x11a0 [ 1887.983815] ? genl_unregister_family+0x8a0/0x8a0 [ 1887.988694] ? radix_tree_insert+0x850/0x850 [ 1887.993116] ? perf_trace_lock+0x750/0x750 [ 1887.997382] ? kasan_check_read+0x11/0x20 [ 1888.001591] ? radix_tree_lookup+0x22/0x30 [ 1888.005846] genl_rcv_msg+0xca/0x16c [ 1888.010105] netlink_rcv_skb+0x17d/0x410 [ 1888.014185] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 1888.018968] ? netlink_ack+0xba0/0xba0 [ 1888.022889] ? __down_interruptible+0x740/0x740 [ 1888.028363] genl_rcv+0x29/0x40 [ 1888.031664] netlink_unicast+0x574/0x770 [ 1888.035748] ? netlink_attachskb+0x980/0x980 [ 1888.040182] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:09:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x8001a0ffffffff) 18:09:24 executing program 5: accept(0xffffffffffffffff, &(0x7f0000001480)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f00000002c0)=0x80) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000001500)=@assoc_value, &(0x7f0000001540)=0x8) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r1, &(0x7f0000000340)="1e5bb76c3a01413da7ccbfc23b5a1f1301daa192f96af702171e7bc900fa567da427eb6583ef5f5bf972cb8398b511456826162299af65c3dfc0ff3bcba115e5162c32e1813d39dfd814d9926417d8685e1941825c2a14144d5f6a99e2074b228d36095df81e6fa04cefbee28789fb2c6c4ded353333217be289e6ead8277bb71af111876a4bbd6ffe03293cbbaee0a4cb97de503b7c1347ffa7737c61d3486b87ad1979c26e82b7d6b07a680c91c61acf4eaaa3bfb4cdc9075afd9468d3afbe941f95f6055c2e5d3f4909c25c2ffd3344b40d", 0xd3, 0x40000, &(0x7f0000000440)={0xa, 0x4e22, 0x7, @loopback, 0x4d}, 0x1c) r2 = syz_open_dev$cec(&(0x7f0000000180)='/dev/cec#\x00', 0x1, 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000480)=""/4096) r3 = syz_open_dev$midi(&(0x7f0000000140)='/dev/midi#\x00', 0x388, 0x200040) r4 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x400000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r5 = syz_open_dev$vcsa(&(0x7f0000000040)='/dev/vcsa#\x00', 0xffff, 0x8000) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000000)={r5}) write$RDMA_USER_CM_CMD_JOIN_IP_MCAST(r2, &(0x7f0000000240)={0x10, 0x30, 0xfa00, {&(0x7f0000000200)={0xffffffffffffffff}, 0x1, {0xa, 0x4e23, 0x1, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x5}}}, 0x1b) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r3, &(0x7f0000000280)={0x11, 0x10, 0xfa00, {&(0x7f00000001c0), r6}}, 0x18) ioctl$PPPIOCSMRU(r5, 0x40047452, &(0x7f0000000080)=0x40) fsync(r1) 18:09:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0xffffffffa0008000) [ 1888.046011] netlink_sendmsg+0xa05/0xf90 [ 1888.046028] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1888.046068] ? netlink_unicast+0x770/0x770 [ 1888.046094] ? selinux_socket_sendmsg+0x36/0x40 [ 1888.046110] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1888.046126] ? security_socket_sendmsg+0x93/0xc0 [ 1888.046141] ? netlink_unicast+0x770/0x770 [ 1888.046166] sock_sendmsg+0xdd/0x130 [ 1888.082864] ___sys_sendmsg+0x7ec/0x910 [ 1888.086863] ? copy_msghdr_from_user+0x570/0x570 [ 1888.091630] ? iterate_fd+0x4b0/0x4b0 [ 1888.095463] ? lock_downgrade+0x910/0x910 18:09:24 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$admmidi(&(0x7f00000003c0)='/dev/admmidi#\x00', 0xffffffff, 0x1) ioctl$TCSBRK(r1, 0x5409, 0x81) ioctl$IOC_PR_PREEMPT(r1, 0x401870cb, &(0x7f0000000400)={0x7, 0x1, 0x14, 0x8001}) r2 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x40, 0x0) r3 = geteuid() ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000440)=0x8) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000300), &(0x7f0000000340)=0x4) r4 = getegid() ioctl$VIDIOC_S_AUDIO(r2, 0x40345622, &(0x7f0000000480)={0x4, "8ab9d2e2e91d9e2d95eaf397b71c92f54770575e1cfe7cd419da4be8d4eced35", 0x0, 0x1}) ioctl$PPPIOCGFLAGS(r2, 0x8004745a, &(0x7f0000000380)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000200)={{{@in=@multicast1, @in6=@ipv4}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f0000000080)=0xe8) write$P9_RGETATTR(r2, &(0x7f0000000140)={0xa0, 0x19, 0x2, {0x28, {0x2, 0x4, 0x8}, 0x40, r3, r4, 0x5, 0x100000000, 0xfff, 0x3, 0x6, 0x1fffffffe0, 0x6, 0x100000000, 0xf7, 0xf26, 0x3, 0x5, 0x20, 0x3, 0x7}}, 0xa0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$void(r2, 0x0) [ 1888.099638] ? __fget_light+0x2db/0x420 [ 1888.103634] ? fget_raw+0x20/0x20 [ 1888.107108] ? __mutex_unlock_slowpath+0x195/0x870 [ 1888.112068] ? wait_for_completion+0x810/0x810 [ 1888.116673] ? __fdget+0x1b/0x20 [ 1888.120063] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1888.125620] ? sockfd_lookup_light+0xc2/0x160 [ 1888.130140] __sys_sendmsg+0x112/0x270 [ 1888.134062] ? __ia32_sys_shutdown+0x80/0x80 [ 1888.138515] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.143902] ? trace_hardirqs_off_caller+0x300/0x300 [ 1888.149021] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1888.153813] __x64_sys_sendmsg+0x78/0xb0 [ 1888.157900] do_syscall_64+0x1a3/0x800 [ 1888.161806] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1888.166755] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1888.171798] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1888.176670] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1888.181868] RIP: 0033:0x458099 18:09:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0xffffffffa0018000) 18:09:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1888.185076] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1888.204381] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1888.212100] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1888.212113] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1888.226646] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1888.233919] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1888.233930] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:27 executing program 2: r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 18:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) llistxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=""/13, 0xd) 18:09:27 executing program 4 (fault-call:1 fault-nth:4): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/btrfs-control\x00', 0x800, 0x0) ioctl$VT_GETMODE(r2, 0x5601, &(0x7f0000000080)) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x0, &(0x7f0000000000)=0x5, 0x4) [ 1890.869514] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1890.910887] FAULT_INJECTION: forcing a failure. [ 1890.910887] name failslab, interval 1, probability 0, space 0, times 0 [ 1890.945886] CPU: 1 PID: 12018 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 18:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x5, 0x80) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) seccomp(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f00000001c0)=[{0x1ff, 0x0, 0x6, 0xfff}]}) timerfd_settime(r1, 0x1, &(0x7f0000000140)={{r2, r3+30000000}, {0x77359400}}, &(0x7f0000000180)) [ 1890.953036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1890.962408] Call Trace: [ 1890.965014] dump_stack+0x1db/0x2d0 [ 1890.968670] ? dump_stack_print_info.cold+0x20/0x20 [ 1890.973750] ? tick_nohz_tick_stopped+0x1a/0x90 [ 1890.978435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1890.983996] should_fail.cold+0xa/0x15 [ 1890.987908] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1890.993050] ? ___might_sleep+0x1e7/0x310 [ 1890.997221] ? arch_local_save_flags+0x50/0x50 [ 1891.001829] ? _raw_spin_unlock_irqrestore+0x6b/0xe0 18:09:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) recvmsg(r0, &(0x7f0000000680)={&(0x7f0000000000)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000100)=""/82, 0x52}, {&(0x7f0000000180)=""/219, 0xdb}, {&(0x7f00000002c0)=""/182, 0xb6}, {&(0x7f0000000080)=""/29, 0x1d}, {&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/32, 0x20}, {&(0x7f0000000400)=""/95, 0x5f}, {&(0x7f0000000480)=""/218, 0xda}], 0x8, &(0x7f0000000600)=""/73, 0x49}, 0x40000101) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f00000006c0)={0x0, 0x9c, "1ee9dea5ac5d2787b452c1130ddbe02603ac6b357bdca033fc6b53675265a9184fec8d437bb3f529fe91113bd4038724aec18c124464bada486cd0395d68fad4b754cceef82f9e3ff8c8748a0acbd341439aebb358e098208a9a07c16b6ce300e4ed83ed1a726ed836649d287b4086876834b3eece495d2553c95e8c62686aa3a9aae9d436e14a08ce917808d8a19dc53c3dcca6d36454a410b10cc4"}, &(0x7f0000000780)=0xa4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f00000007c0)={r4, 0x7b0, 0x2, 0xfffffffffffffff8, 0x5, 0x3}, &(0x7f0000000800)=0x14) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r5, r2, 0x0) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000840)={r4, 0x8000, 0x7}, 0x8) msgget(0x1, 0x0) [ 1891.006959] __should_failslab+0x121/0x190 [ 1891.011723] should_failslab+0x9/0x14 [ 1891.015542] kmem_cache_alloc_node+0x265/0x710 [ 1891.020208] ? vprintk_default+0x28/0x30 [ 1891.024291] ? vprintk_func+0x86/0x189 [ 1891.028203] __alloc_skb+0xf4/0x730 [ 1891.031851] ? skb_scrub_packet+0x440/0x440 [ 1891.036196] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1891.036214] ? __nla_parse+0x12a/0x340 [ 1891.036243] ovs_dp_cmd_del+0x30/0x270 [ 1891.036267] genl_family_rcv_msg+0x80d/0x11a0 [ 1891.036293] ? genl_unregister_family+0x8a0/0x8a0 [ 1891.036321] ? radix_tree_insert+0x850/0x850 [ 1891.063346] ? perf_trace_lock+0x750/0x750 [ 1891.067635] ? radix_tree_lookup+0x22/0x30 [ 1891.071894] genl_rcv_msg+0xca/0x16c [ 1891.075630] netlink_rcv_skb+0x17d/0x410 [ 1891.079713] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 1891.084494] ? netlink_ack+0xba0/0xba0 [ 1891.088409] ? __down_interruptible+0x740/0x740 [ 1891.093106] genl_rcv+0x29/0x40 [ 1891.096398] netlink_unicast+0x574/0x770 [ 1891.100486] ? netlink_attachskb+0x980/0x980 [ 1891.104913] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.110472] netlink_sendmsg+0xa05/0xf90 [ 1891.114549] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.120129] ? netlink_unicast+0x770/0x770 [ 1891.124389] ? selinux_socket_sendmsg+0x36/0x40 [ 1891.129077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1891.134629] ? security_socket_sendmsg+0x93/0xc0 [ 1891.139398] ? netlink_unicast+0x770/0x770 [ 1891.143654] sock_sendmsg+0xdd/0x130 [ 1891.147394] ___sys_sendmsg+0x7ec/0x910 [ 1891.151387] ? copy_msghdr_from_user+0x570/0x570 [ 1891.156157] ? iterate_fd+0x4b0/0x4b0 18:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000040)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000a00000/0x600000)=nil, &(0x7f0000a20000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000fb1000/0x1000)=nil, &(0x7f0000fb1000/0x4000)=nil, &(0x7f0000f28000/0x2000)=nil, &(0x7f0000ffb000/0x4000)=nil, &(0x7f0000e34000/0x1000)=nil, &(0x7f0000000140)="342c218e48bdd2f71a8df75067b76ac1a41615e8b25b20dd14b331dc1093c2d89b7f2839559f01ef5f38131285f7c1aa20ab63d9894ac485ab3e5c8490a7fefff9a23540446aee84bdef383dcf26ecdf7fd74383a6cba0c63a572cab4a62d6cf8c25eba499e53cc1f199ab14c9b87e070da6faa323223e249ec06268e5efeaee9a12f3", 0x83, r0}, 0x68) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1891.159988] ? lock_downgrade+0x910/0x910 [ 1891.164164] ? __fget_light+0x2db/0x420 [ 1891.168155] ? fget_raw+0x20/0x20 [ 1891.171628] ? __mutex_unlock_slowpath+0x195/0x870 [ 1891.176585] ? wait_for_completion+0x810/0x810 [ 1891.181191] ? __fdget+0x1b/0x20 [ 1891.184578] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1891.190130] ? sockfd_lookup_light+0xc2/0x160 [ 1891.194644] __sys_sendmsg+0x112/0x270 [ 1891.198561] ? __ia32_sys_shutdown+0x80/0x80 [ 1891.203003] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.208397] ? trace_hardirqs_off_caller+0x300/0x300 [ 1891.213519] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1891.218304] __x64_sys_sendmsg+0x78/0xb0 [ 1891.222383] do_syscall_64+0x1a3/0x800 [ 1891.226288] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1891.231230] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1891.236265] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1891.241138] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1891.246338] RIP: 0033:0x458099 18:09:27 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000180)='/proc/self/net/pfkey\x00', 0x240, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f00000001c0)={'vcan0\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f0000000200)=r2) r3 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r3, 0x54a1) setsockopt$inet_mreq(r3, 0x0, 0x23, &(0x7f0000000080)={@dev={0xac, 0x14, 0x14, 0x2a}, @local}, 0x8) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r3, 0xc0305710, &(0x7f0000000140)={0x0, 0x0, 0x300000000000000, 0x2}) 18:09:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1891.249544] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1891.268461] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1891.276178] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1891.283450] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1891.290724] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1891.298000] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1891.305280] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:28 executing program 2: r0 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r0, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 18:09:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000140)='/proc/sys/net/ipv4/vs/drop_entry\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x8) dup3(r1, r0, 0x80000) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x8912, 0x400200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000000000)=0x0) capget(&(0x7f0000000040)={0x20080522, r5}, &(0x7f00000002c0)={0x8b, 0xffffffff, 0x2, 0xb778, 0x5, 0x1}) r6 = dup3(r4, r3, 0x0) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000240)={0x0, 0x7}, &(0x7f0000000100)=0xfffffffffffffe58) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r6, 0x84, 0x71, &(0x7f0000000080)={r7, 0x8}, 0x8) ioctl$RTC_PLL_GET(r6, 0x80207011, &(0x7f0000000200)) r8 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$EVIOCGABS0(r8, 0x80184540, &(0x7f00000001c0)=""/42) [ 1891.448121] audit: type=1400 audit(1548094168.107:67): avc: denied { write } for pid=12045 comm="syz-executor5" name="net" dev="proc" ino=268459 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1891.490797] audit: type=1400 audit(1548094168.107:68): avc: denied { add_name } for pid=12045 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=dir permissive=1 [ 1891.649185] audit: type=1400 audit(1548094168.107:69): avc: denied { create } for pid=12045 comm="syz-executor5" name="pfkey" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:insmod_t:s0 tclass=file permissive=1 18:09:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x20002, 0x0) socket$inet6_dccp(0xa, 0x6, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_UNLOCK(r1, 0x40405515, &(0x7f0000000080)={0x3, 0x3, 0x1, 0x3c, 'syz0\x00', 0xfffffffffffffffd}) 18:09:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:30 executing program 2: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:30 executing program 4 (fault-call:1 fault-nth:5): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x6, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) [ 1893.989833] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) accept4$llc(r0, &(0x7f0000000040), &(0x7f0000000080)=0x10, 0x80000) [ 1894.030595] FAULT_INJECTION: forcing a failure. [ 1894.030595] name failslab, interval 1, probability 0, space 0, times 0 [ 1894.042984] CPU: 1 PID: 12070 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1894.050113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1894.059501] Call Trace: [ 1894.062105] dump_stack+0x1db/0x2d0 [ 1894.065748] ? dump_stack_print_info.cold+0x20/0x20 [ 1894.070779] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1894.075891] ? kasan_slab_alloc+0xf/0x20 18:09:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) ftruncate(r0, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) [ 1894.079969] ? kmem_cache_alloc_node+0x144/0x710 [ 1894.084743] ? __alloc_skb+0xf4/0x730 [ 1894.088586] ? genl_family_rcv_msg+0x80d/0x11a0 [ 1894.093276] should_fail.cold+0xa/0x15 [ 1894.097184] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1894.102308] ? ___might_sleep+0x1e7/0x310 [ 1894.106468] ? arch_local_save_flags+0x50/0x50 [ 1894.111077] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1894.116623] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1894.116654] __should_failslab+0x121/0x190 [ 1894.116677] should_failslab+0x9/0x14 [ 1894.116694] kmem_cache_alloc_node_trace+0x270/0x720 [ 1894.116714] ? __alloc_skb+0xf4/0x730 [ 1894.116740] __kmalloc_node_track_caller+0x3d/0x70 [ 1894.126506] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1894.126530] __alloc_skb+0x12d/0x730 [ 1894.126562] ? skb_scrub_packet+0x440/0x440 [ 1894.126590] ? retint_kernel+0x2d/0x2d [ 1894.126626] ovs_dp_cmd_del+0x30/0x270 [ 1894.164836] genl_family_rcv_msg+0x80d/0x11a0 [ 1894.169353] ? genl_unregister_family+0x8a0/0x8a0 [ 1894.174222] ? radix_tree_insert+0x850/0x850 [ 1894.178640] ? perf_trace_lock+0x750/0x750 [ 1894.182922] ? radix_tree_lookup+0x22/0x30 [ 1894.187184] genl_rcv_msg+0xca/0x16c [ 1894.190913] netlink_rcv_skb+0x17d/0x410 [ 1894.194996] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 1894.199776] ? netlink_ack+0xba0/0xba0 [ 1894.203687] ? __down_interruptible+0x740/0x740 [ 1894.208382] genl_rcv+0x29/0x40 [ 1894.211673] netlink_unicast+0x574/0x770 [ 1894.215762] ? netlink_attachskb+0x980/0x980 [ 1894.220193] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1894.225748] netlink_sendmsg+0xa05/0xf90 [ 1894.229821] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1894.235385] ? netlink_unicast+0x770/0x770 [ 1894.239643] ? selinux_socket_sendmsg+0x36/0x40 [ 1894.244325] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1894.249882] ? security_socket_sendmsg+0x93/0xc0 [ 1894.254648] ? netlink_unicast+0x770/0x770 [ 1894.258902] sock_sendmsg+0xdd/0x130 [ 1894.262636] ___sys_sendmsg+0x7ec/0x910 [ 1894.266632] ? copy_msghdr_from_user+0x570/0x570 [ 1894.271397] ? iterate_fd+0x4b0/0x4b0 [ 1894.275226] ? lock_downgrade+0x910/0x910 18:09:30 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/mixer\x00', 0x4040, 0x0) ioctl$KDSKBSENT(r1, 0x4b49, &(0x7f0000000180)="e19b81f0a263c7") r2 = syz_open_dev$vbi(&(0x7f0000000000)='/dev/vbi#\x00', 0x3, 0x2) openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1894.279397] ? __fget_light+0x2db/0x420 [ 1894.283384] ? fget_raw+0x20/0x20 [ 1894.286853] ? __mutex_unlock_slowpath+0x195/0x870 [ 1894.291805] ? wait_for_completion+0x810/0x810 [ 1894.296411] ? __fdget+0x1b/0x20 [ 1894.299796] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1894.305348] ? sockfd_lookup_light+0xc2/0x160 [ 1894.309861] __sys_sendmsg+0x112/0x270 [ 1894.313770] ? __ia32_sys_shutdown+0x80/0x80 [ 1894.318212] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1894.318232] ? trace_hardirqs_off_caller+0x300/0x300 18:09:31 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) accept4$x25(r3, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x800) [ 1894.318251] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1894.328719] __x64_sys_sendmsg+0x78/0xb0 [ 1894.328741] do_syscall_64+0x1a3/0x800 [ 1894.328761] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1894.328781] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1894.328806] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1894.328835] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1894.328851] RIP: 0033:0x458099 18:09:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1894.364640] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1894.383561] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1894.391278] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1894.398564] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1894.405839] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1894.413117] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1894.420391] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:31 executing program 2: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$midi(&(0x7f0000000240)='/dev/midi#\x00', 0x1f, 0x40000) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r3 = add_key(&(0x7f0000000040)='.request_key_auth\x00', &(0x7f0000000080)={'syz', 0x1}, &(0x7f0000000280)="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", 0xfe, 0x0) r4 = request_key(&(0x7f00000001c0)='trusted\x00', &(0x7f0000000380)={'syz', 0x1}, &(0x7f00000003c0)='ppp0\x00', 0xfffffffffffffffb) keyctl$unlink(0x9, r3, r4) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000400)={{{@in6=@ipv4={[], [], @broadcast}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000500)=0xe8) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0, 0x0}, &(0x7f0000000580)=0xc) fchown(r2, r5, r6) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000200)={0x0}, &(0x7f0000000180)=0xfffffffffffffd16) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f00000005c0)={0xfff, 0x800, 0x0, 0x2, 0x5}) sched_getaffinity(r7, 0x8, &(0x7f0000000140)) 18:09:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r0, 0x400c6615, &(0x7f0000000140)) r2 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040)='tls\x00', 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup3(r3, r1, 0x0) ioctl$VIDIOC_S_INPUT(r2, 0xc0045627, &(0x7f0000000080)=0x6) setsockopt$llc_int(r4, 0x10c, 0x0, &(0x7f0000000180)=0xffffffffffff0001, 0x4) ioctl$VIDIOC_ENCODER_CMD(r4, 0xc028564d, &(0x7f0000000100)={0x1, 0x1, [0x9, 0x9249, 0x9, 0x7, 0x3, 0xd1f, 0x8, 0x81]}) 18:09:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:33 executing program 4 (fault-call:1 fault-nth:6): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:33 executing program 2: r0 = creat(0x0, 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1897.061986] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:33 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1897.108410] FAULT_INJECTION: forcing a failure. [ 1897.108410] name failslab, interval 1, probability 0, space 0, times 0 [ 1897.153612] CPU: 0 PID: 12115 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1897.160752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1897.170107] Call Trace: [ 1897.170137] dump_stack+0x1db/0x2d0 [ 1897.170165] ? dump_stack_print_info.cold+0x20/0x20 [ 1897.170189] ? __x64_sys_sendmsg+0x78/0xb0 [ 1897.170212] ? do_syscall_64+0x1a3/0x800 [ 1897.189687] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1897.195092] should_fail.cold+0xa/0x15 [ 1897.195117] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1897.195147] ? ___might_sleep+0x1e7/0x310 [ 1897.195165] ? arch_local_save_flags+0x50/0x50 [ 1897.195186] ? trace_hardirqs_on+0xbd/0x310 [ 1897.208330] __should_failslab+0x121/0x190 [ 1897.208354] should_failslab+0x9/0x14 [ 1897.208372] kmem_cache_alloc_node+0x265/0x710 [ 1897.229871] ? genl_family_rcv_msg+0x8bf/0x11a0 [ 1897.234563] __alloc_skb+0xf4/0x730 [ 1897.238219] ? skb_scrub_packet+0x440/0x440 [ 1897.242569] ? radix_tree_insert+0x850/0x850 [ 1897.246991] ? perf_trace_lock+0x750/0x750 [ 1897.251299] netlink_ack+0x25c/0xba0 [ 1897.255067] ? netlink_sendmsg+0xf90/0xf90 [ 1897.259328] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1897.264882] ? genl_rcv_msg+0x106/0x16c [ 1897.268918] netlink_rcv_skb+0x348/0x410 [ 1897.273018] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 1897.277802] ? netlink_ack+0xba0/0xba0 [ 1897.281712] ? __down_interruptible+0x740/0x740 [ 1897.286415] genl_rcv+0x29/0x40 [ 1897.289709] netlink_unicast+0x574/0x770 [ 1897.293793] ? netlink_attachskb+0x980/0x980 [ 1897.298222] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1897.303781] netlink_sendmsg+0xa05/0xf90 [ 1897.307861] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1897.313423] ? netlink_unicast+0x770/0x770 [ 1897.317684] ? selinux_socket_sendmsg+0x36/0x40 [ 1897.322366] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1897.327915] ? security_socket_sendmsg+0x93/0xc0 [ 1897.332682] ? netlink_unicast+0x770/0x770 [ 1897.336942] sock_sendmsg+0xdd/0x130 [ 1897.340762] ___sys_sendmsg+0x7ec/0x910 [ 1897.344767] ? copy_msghdr_from_user+0x570/0x570 [ 1897.349543] ? iterate_fd+0x4b0/0x4b0 [ 1897.353379] ? lock_downgrade+0x910/0x910 [ 1897.357565] ? __fget_light+0x2db/0x420 [ 1897.361554] ? fget_raw+0x20/0x20 [ 1897.365034] ? __mutex_unlock_slowpath+0x195/0x870 [ 1897.370003] ? wait_for_completion+0x810/0x810 [ 1897.374598] ? __fdget+0x1b/0x20 [ 1897.374614] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1897.374632] ? sockfd_lookup_light+0xc2/0x160 [ 1897.374655] __sys_sendmsg+0x112/0x270 [ 1897.374677] ? __ia32_sys_shutdown+0x80/0x80 [ 1897.374715] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1897.401722] ? trace_hardirqs_off_caller+0x300/0x300 [ 1897.406843] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1897.411623] __x64_sys_sendmsg+0x78/0xb0 [ 1897.415701] do_syscall_64+0x1a3/0x800 [ 1897.419614] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1897.424559] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1897.429597] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1897.434471] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1897.439676] RIP: 0033:0x458099 18:09:33 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$GIO_UNISCRNMAP(r3, 0x4b69, &(0x7f0000000000)) 18:09:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:34 executing program 5: r0 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x1010c0, 0x0) mq_notify(r0, &(0x7f0000000080)={0x0, 0x6, 0x0, @thr={&(0x7f0000000140)="b9570ca07145449a012f2754219c031a9d7d5e5cc0780f2be3a6fa62f5356fae30ae647cc5152c94fe0d12c0d76f3e4c3aebcfdd3d5e7b59f1554c9d775ede1ae94e16065b7f40ff0a45fbc12eb54f8d0efcd9f5965c1c38cf38b4d556fc872e20c4c64f80aaee5cfc236f79cbaeb1bab30b0dfccfe7e14b8ad9e5becf6056150f8a94d71e7b0deb1bb656d2d048e0e9a6187a", &(0x7f0000000200)="2d7cf056eef1dc80da25b297b17b37be245d9f9ff3a09363a931d0d400662f7c906eb3a1e1dc7c2be3a67ed2edc21a6e1362e066372f6c639666fb36bc129571609eab0b1ddfd669e8ef4f177107895966e1ddb0101dab7bb7eb4046dd0fe3511978b92b87d70c33d53279bfaada3240f2c4dbbb0feb08b62de2a3f099ae8a87d1c58c5262b65b7aec135f853609bff8b1ce3a96301a825138355cc52bfc6d3426b8a98a968eba1e9bee96e4468414903b2aab933729dfce6a7ace2d5c49b89b6087c17b5fbbca8ce85cefd8a3cc1e8d9df0ccd25f0f5e83"}}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1897.442880] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1897.461790] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1897.469506] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1897.476786] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1897.484080] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1897.491361] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1897.498640] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000100)='/dev/vcs\x00', 0x97fb470bdffe3af6, 0x0) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) write$sndseq(r1, &(0x7f00000002c0)=[{0x8, 0x82, 0xfffffffffffffffe, 0x760b, @tick=0x200, {0x6cd1, 0x200}, {0x4, 0xffffffffffffffff}, @ext={0x18, &(0x7f0000000140)="078d0ebf9bb1f502b8553f4fa16434c310830fe859168360"}}, {0x0, 0x8, 0xe2, 0x6a4ab969, @tick=0x1, {0x4, 0x3}, {0x400, 0x20}, @addr={0xff, 0x4e3}}, {0x879, 0x6, 0x400, 0x8, @time={r2, r3+10000000}, {0x20, 0x100000000000}, {0x9, 0xff}, @connect={{0x4, 0x43b}, {0x7, 0xfffffffffffffffb}}}, {0x80000001, 0x1, 0x80, 0x0, @tick=0x8d5, {0x7fff}, {0x3, 0x2}, @quote={{0x4, 0x7}, 0x7, &(0x7f00000001c0)={0x5, 0x20, 0x6, 0x4, @tick=0x8, {0x8, 0x4}, {0x40, 0x100000000}, @control={0x7, 0x58, 0x9}}}}], 0xc0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r5 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x10001, 0x0) accept4$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14, 0x80000) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r4, 0x0) 18:09:36 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x6, 0x800) ioctl$SNDRV_CTL_IOCTL_ELEM_LIST(r1, 0xc0505510, &(0x7f0000000140)={0x4, 0x1, 0x1, 0x8, &(0x7f0000000080)=[{}]}) 18:09:36 executing program 4 (fault-call:1 fault-nth:7): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:36 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:36 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:36 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x10000, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r1, 0x4040aea0, &(0x7f0000000080)={0x80000000, 0x7f, 0x5389, 0x0, 0x2, 0x5, 0x100, 0xd75, 0x0, 0x4, 0x4, 0x6f716fb1, 0x0, 0x7, 0x9, 0x3, 0x0, 0x5, 0x6c5}) [ 1900.165199] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1900.189477] FAULT_INJECTION: forcing a failure. [ 1900.189477] name failslab, interval 1, probability 0, space 0, times 0 18:09:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x101040, 0x0) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x4508, 0x20, 0x6, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) [ 1900.215259] CPU: 0 PID: 12160 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1900.222407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1900.231772] Call Trace: [ 1900.234419] dump_stack+0x1db/0x2d0 [ 1900.238085] ? dump_stack_print_info.cold+0x20/0x20 [ 1900.243117] ? __kasan_kmalloc.constprop.0+0xcf/0xe0 [ 1900.248236] ? kasan_slab_alloc+0xf/0x20 [ 1900.252311] ? kmem_cache_alloc_node+0x144/0x710 [ 1900.257091] ? __alloc_skb+0xf4/0x730 [ 1900.260900] ? netlink_rcv_skb+0x348/0x410 [ 1900.265156] should_fail.cold+0xa/0x15 [ 1900.269086] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1900.274219] ? ___might_sleep+0x1e7/0x310 [ 1900.278425] ? arch_local_save_flags+0x50/0x50 [ 1900.283032] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1900.288597] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1900.294173] __should_failslab+0x121/0x190 [ 1900.298425] should_failslab+0x9/0x14 [ 1900.302249] kmem_cache_alloc_node_trace+0x270/0x720 [ 1900.307375] ? __alloc_skb+0xf4/0x730 [ 1900.311204] __kmalloc_node_track_caller+0x3d/0x70 [ 1900.316155] __kmalloc_reserve.isra.0+0x40/0xe0 [ 1900.320841] __alloc_skb+0x12d/0x730 [ 1900.324581] ? skb_scrub_packet+0x440/0x440 [ 1900.328925] ? radix_tree_insert+0x850/0x850 [ 1900.333353] ? perf_trace_lock+0x750/0x750 [ 1900.337618] netlink_ack+0x25c/0xba0 [ 1900.341356] ? netlink_sendmsg+0xf90/0xf90 [ 1900.345612] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1900.351166] ? genl_rcv_msg+0x106/0x16c [ 1900.355160] netlink_rcv_skb+0x348/0x410 [ 1900.359240] ? genl_family_rcv_msg+0x11a0/0x11a0 18:09:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r1) getresuid(&(0x7f0000000000)=0x0, &(0x7f0000000040), &(0x7f0000000080)) ioctl$TUNSETOWNER(r2, 0x400454cc, r3) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r5, r4, 0x0) [ 1900.364013] ? netlink_ack+0xba0/0xba0 [ 1900.367937] ? __down_interruptible+0x740/0x740 [ 1900.372636] genl_rcv+0x29/0x40 [ 1900.375925] netlink_unicast+0x574/0x770 [ 1900.380004] ? netlink_attachskb+0x980/0x980 [ 1900.384454] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1900.390007] netlink_sendmsg+0xa05/0xf90 [ 1900.394096] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1900.399661] ? netlink_unicast+0x770/0x770 [ 1900.403918] ? selinux_socket_sendmsg+0x36/0x40 [ 1900.408602] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:09:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) socket$kcm(0x29, 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) [ 1900.414152] ? security_socket_sendmsg+0x93/0xc0 [ 1900.418917] ? netlink_unicast+0x770/0x770 [ 1900.423172] sock_sendmsg+0xdd/0x130 [ 1900.426905] ___sys_sendmsg+0x7ec/0x910 [ 1900.430907] ? copy_msghdr_from_user+0x570/0x570 [ 1900.435680] ? iterate_fd+0x4b0/0x4b0 [ 1900.439506] ? lock_downgrade+0x910/0x910 [ 1900.443675] ? __fget_light+0x2db/0x420 [ 1900.447663] ? fget_raw+0x20/0x20 [ 1900.451136] ? __mutex_unlock_slowpath+0x195/0x870 [ 1900.456096] ? wait_for_completion+0x810/0x810 [ 1900.460695] ? __fdget+0x1b/0x20 [ 1900.464104] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1900.469668] ? sockfd_lookup_light+0xc2/0x160 [ 1900.474186] __sys_sendmsg+0x112/0x270 [ 1900.478100] ? __ia32_sys_shutdown+0x80/0x80 [ 1900.482545] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1900.487922] ? trace_hardirqs_off_caller+0x300/0x300 [ 1900.493062] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1900.497844] __x64_sys_sendmsg+0x78/0xb0 [ 1900.501944] do_syscall_64+0x1a3/0x800 [ 1900.505851] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1900.510795] ? prepare_exit_to_usermode+0x232/0x3b0 18:09:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KDSKBSENT(r3, 0x4b49, &(0x7f0000000000)="388c4aac647b328d202c23d1fa4acbfe9ad00ac4c2e6d3dbdee0ba3471a366e7f7da3815aedf24378c0661ee1f7969946473b984596eae1ca363bd5f16bccadc46d6b0142f00c8e4344dd84d799672b81487ba765d52ece90d67ffa8a9cdbc84f95221a647a16913980ba5cefad9ffe8bd89c3d560dd9637e5") [ 1900.515831] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1900.520701] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1900.525900] RIP: 0033:0x458099 [ 1900.529107] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1900.548015] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1900.555766] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 18:09:37 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000000)={0x0, 0xfffffffffffffffa, 0x20, 0x3}, &(0x7f0000000040)=0x10) connect$l2tp(r3, &(0x7f0000000100)=@pppol2tp={0x18, 0x1, {0x0, r3, {0x2, 0x4e23, @remote}, 0x0, 0x1, 0x2, 0x1}}, 0x26) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r3, 0xc008551c, &(0x7f0000000140)=ANY=[@ANYBLOB="09000000140000000200000000020000050000000700008000000100"]) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f0000000180)={0x30, 0x5, 0x0, {0x0, 0x5, 0x1, 0xfff}}, 0x30) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000080)={r4, 0x6}, 0xc) 18:09:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1900.563075] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1900.570350] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1900.577626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1900.584904] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:39 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:39 executing program 5: r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x64000, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000140)={0x4, 0x6, 0x6}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x1, 0xfffffffffffffffe, [0x0, 0x0, 0x1f000000]}) 18:09:39 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VIDIOC_TRY_FMT(r0, 0xc0d05640, &(0x7f0000000100)={0xf, @pix={0x0, 0x4, 0x39776f79, 0x4, 0xfffffffffffffffd, 0x8, 0x1, 0x8, 0x1, 0x0, 0x1, 0x3}}) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000)='/dev/hwrng\x00', 0x105080, 0x0) ioctl$PPPIOCGIDLE(r1, 0x8010743f, &(0x7f0000000040)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0xc, 0x1659, 0xfffffffffffffffb, 0x8, 0x2, 0x75, 0x8, 0x5, 0x8, 0x36c, 0x7, 0x77}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) 18:09:39 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:39 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:39 executing program 4 (fault-call:1 fault-nth:8): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1903.259377] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1903.314800] FAULT_INJECTION: forcing a failure. [ 1903.314800] name failslab, interval 1, probability 0, space 0, times 0 [ 1903.331389] CPU: 0 PID: 12199 Comm: syz-executor4 Not tainted 5.0.0-rc3 #36 [ 1903.338518] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 1903.347885] Call Trace: [ 1903.350490] dump_stack+0x1db/0x2d0 [ 1903.354135] ? dump_stack_print_info.cold+0x20/0x20 [ 1903.359186] should_fail.cold+0xa/0x15 18:09:40 executing program 5: r0 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/policy\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000180)={0x2, 0x1ff, 0x5}) ioctl$TIOCGETD(r0, 0x5424, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) write$selinux_user(r0, &(0x7f0000000140)={'system_u:object_r:dpkg_lock_t:s0', 0x20, 'system_u\x00'}, 0x2a) [ 1903.363110] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 1903.368236] ? perf_trace_lock_acquire+0x138/0x7d0 [ 1903.373184] ? check_preemption_disabled+0x48/0x290 [ 1903.378217] ? check_preemption_disabled+0x48/0x290 [ 1903.383255] ? perf_trace_lock+0x750/0x750 [ 1903.387520] __should_failslab+0x121/0x190 [ 1903.391779] should_failslab+0x9/0x14 [ 1903.395598] kmem_cache_alloc+0x47/0x710 [ 1903.399679] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1903.405248] skb_clone+0x1c5/0x510 [ 1903.408810] ? skb_split+0x1210/0x1210 18:09:40 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = getpgrp(0xffffffffffffffff) r4 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000100)='/dev/snapshot\x00', 0x800, 0x0) perf_event_open(&(0x7f0000000040)={0x2, 0x70, 0x400, 0x6, 0x4, 0xffd8, 0x0, 0x1f, 0x800, 0x4, 0x3f, 0xf83, 0x1ff, 0x0, 0x7000000000, 0x0, 0x7, 0x10001, 0x180, 0x400, 0x7f, 0x4, 0x5, 0xffffffffffff41e6, 0xb51, 0x400, 0x1, 0x2, 0x0, 0x200, 0x7, 0x40, 0x1000, 0x9, 0x1db8, 0x101, 0x7, 0x4360, 0x0, 0xff, 0x1, @perf_bp={&(0x7f0000000000), 0xd}, 0x8040, 0x3, 0x6, 0x8, 0xe6d, 0x0, 0xea5}, r3, 0x3, r4, 0xa) dup3(r2, r1, 0x0) [ 1903.412711] ? rcu_softirq_qs+0x20/0x20 [ 1903.416699] ? rcu_read_unlock_special+0x380/0x380 [ 1903.421661] netlink_deliver_tap+0xbc0/0xf40 [ 1903.426097] ? kasan_check_write+0x14/0x20 [ 1903.430362] ? netlink_remove_tap+0x630/0x630 [ 1903.434876] ? netlink_getsockbyfilp+0x140/0x140 [ 1903.439706] ? bpf_skb_vlan_push+0x760/0x760 [ 1903.444151] __netlink_sendskb+0x63/0xd0 [ 1903.448230] netlink_unicast+0x64c/0x770 [ 1903.452315] ? netlink_attachskb+0x980/0x980 [ 1903.456750] netlink_ack+0x607/0xba0 [ 1903.460490] ? netlink_sendmsg+0xf90/0xf90 18:09:40 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x40, 0x0) mq_open(&(0x7f0000000140)='/dev/uhid\x00', 0x8c0, 0x100, &(0x7f0000000180)={0x0, 0xfff, 0x9, 0x1, 0x100, 0xffffffffffffff00, 0x2fd7, 0x8}) semget$private(0x0, 0x6, 0x74) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0xfffffffffffffffc, 0x0) ioctl$UFFDIO_UNREGISTER(r1, 0x8010aa01, &(0x7f0000000200)={&(0x7f0000fff000/0x1000)=nil, 0x1000}) socket$inet_udp(0x2, 0x2, 0x0) ioctl$KVM_SET_VAPIC_ADDR(0xffffffffffffffff, 0x4008ae93, &(0x7f00000001c0)=0x100000) lsetxattr$security_smack_entry(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='security.SMACK64MMAP\x00', &(0x7f0000000100)='\x00', 0x1, 0x1) [ 1903.464747] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 1903.470297] ? genl_rcv_msg+0x106/0x16c [ 1903.474378] netlink_rcv_skb+0x348/0x410 [ 1903.478459] ? genl_family_rcv_msg+0x11a0/0x11a0 [ 1903.483234] ? netlink_ack+0xba0/0xba0 [ 1903.487144] ? __down_interruptible+0x740/0x740 [ 1903.491835] genl_rcv+0x29/0x40 [ 1903.495125] netlink_unicast+0x574/0x770 [ 1903.499205] ? netlink_attachskb+0x980/0x980 [ 1903.503631] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1903.509180] netlink_sendmsg+0xa05/0xf90 [ 1903.509201] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1903.509228] ? netlink_unicast+0x770/0x770 [ 1903.509255] ? selinux_socket_sendmsg+0x36/0x40 [ 1903.527741] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 1903.527761] ? security_socket_sendmsg+0x93/0xc0 [ 1903.527777] ? netlink_unicast+0x770/0x770 [ 1903.527799] sock_sendmsg+0xdd/0x130 [ 1903.527824] ___sys_sendmsg+0x7ec/0x910 [ 1903.542344] ? copy_msghdr_from_user+0x570/0x570 [ 1903.542361] ? iterate_fd+0x4b0/0x4b0 [ 1903.542394] ? lock_downgrade+0x910/0x910 [ 1903.554841] ? __fget_light+0x2db/0x420 [ 1903.554863] ? fget_raw+0x20/0x20 [ 1903.554886] ? __mutex_unlock_slowpath+0x195/0x870 [ 1903.554909] ? wait_for_completion+0x810/0x810 [ 1903.554931] ? __fdget+0x1b/0x20 [ 1903.562873] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 1903.562893] ? sockfd_lookup_light+0xc2/0x160 [ 1903.562918] __sys_sendmsg+0x112/0x270 [ 1903.562940] ? __ia32_sys_shutdown+0x80/0x80 [ 1903.562978] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1903.606999] ? trace_hardirqs_off_caller+0x300/0x300 18:09:40 executing program 5: r0 = syz_open_procfs(0x0, &(0x7f0000000040)='clear_refs\x00') ioctl$UFFDIO_WAKE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffd000/0x1000)=nil, 0x1000}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) madvise(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x13) [ 1903.612118] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 1903.616893] __x64_sys_sendmsg+0x78/0xb0 [ 1903.620974] do_syscall_64+0x1a3/0x800 [ 1903.624878] ? syscall_return_slowpath+0x5f0/0x5f0 [ 1903.629832] ? prepare_exit_to_usermode+0x232/0x3b0 [ 1903.634869] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 1903.639735] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 1903.644930] RIP: 0033:0x458099 18:09:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1903.648132] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 1903.667040] RSP: 002b:00007f8c25461c78 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1903.667072] RAX: ffffffffffffffda RBX: 00007f8c25461c90 RCX: 0000000000458099 [ 1903.667081] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 1903.667092] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 1903.667105] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f8c254626d4 [ 1903.696619] R13: 00000000004c5590 R14: 00000000004d91c0 R15: 0000000000000004 18:09:40 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000140)={0x0, 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000180)={0x48, @time={r1, r2+10000000}, 0xffffffffffffff43, {0x6, 0x20}, 0x4a, 0x2, 0x3}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000040)='/dev/null\x00', 0x200, 0x0) ioctl$IMGETVERSION(r3, 0x80044942, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:42 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xc1, 0x840) ioctl$SIOCAX25GETINFO(r1, 0x89ed, &(0x7f0000000100)) setsockopt$inet_dccp_int(r1, 0x21, 0xa, &(0x7f0000000180)=0x1, 0x4) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCOUTQNSD(r0, 0x894b, &(0x7f0000000080)) dup3(r3, r2, 0x0) 18:09:42 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:42 executing program 5: r0 = socket(0xb, 0x4, 0x2) preadv(r0, &(0x7f0000000380)=[{&(0x7f00000003c0)=""/230, 0xe6}, {&(0x7f0000000280)=""/197, 0x3f9}], 0x2, 0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r2 = syz_open_dev$swradio(&(0x7f0000000080)='/dev/swradio#\x00', 0x1, 0x2) ioctl$sock_SIOCOUTQNSD(r2, 0x894b, &(0x7f0000000140)) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040)={0x9}, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:42 executing program 4 (fault-call:1 fault-nth:9): r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(0x0, 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1906.358566] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:43 executing program 5: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040)='/dev/net/tun\x00', 0x80, 0x0) r1 = signalfd(0xffffffffffffff9c, &(0x7f0000000080)={0xe8}, 0x8) fcntl$dupfd(r0, 0x406, r1) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:43 executing program 1: openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4000, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000000)='/dev/snd/pcmC#D#p\x00', 0xb6, 0x48040) ioctl$TUNSETVNETHDRSZ(r1, 0x400454d8, &(0x7f0000000040)=0x7fff) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r2, 0x800000) 18:09:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1906.610114] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:43 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) socketpair(0x1c, 0x80805, 0x1, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_NODELAY(r1, 0x84, 0x3, &(0x7f0000000080)=0xfffffffffffffffc, 0x4) 18:09:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) timerfd_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, &(0x7f0000000080)) socketpair(0xe, 0xe, 0x4, &(0x7f0000000200)={0xffffffffffffffff}) setsockopt$inet6_icmp_ICMP_FILTER(r1, 0x1, 0x1, &(0x7f0000000240)={0x401}, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_INFO(r0, 0xc08c5335, &(0x7f0000000140)={0x5, 0x8001, 0x2, 'queue0\x00', 0xffffffffffffffff}) 18:09:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/hash_stats\x00', 0x0, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000040)={0x0, 0x1, 0x9a8, 0x2}) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffff9c, 0x84, 0x0, &(0x7f0000000100)={0x0, 0xf31b, 0x40, 0x2}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000180)={r2, @in6={{0xa, 0x4e20, 0x0, @empty, 0x80000000}}, 0xc840dab, 0x5, 0x2, 0x7fff00000000, 0x21}, &(0x7f0000000240)=0x98) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r3, 0x0) [ 1909.405410] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1909.432388] audit: type=1804 audit(1548094186.087:70): pid=12297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir915374627/syzkaller.r5InmE/151/bus" dev="sda1" ino=17330 res=1 18:09:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x203, 0x0) ioctl$DRM_IOCTL_IRQ_BUSID(r3, 0xc0106403, &(0x7f0000000040)={0xff, 0x7e, 0x401, 0x800}) getsockopt$EBT_SO_GET_ENTRIES(r2, 0x0, 0x81, &(0x7f0000000180)={'nat\x00', 0x0, 0x4, 0x71, [], 0x1, &(0x7f0000000080)=[{}], &(0x7f0000000100)=""/113}, &(0x7f0000000200)=0x78) dup3(r2, r1, 0x0) 18:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x2, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:46 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0xfffffffffffffffe, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:09:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1909.744684] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:46 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x40001, 0x0) fcntl$getownex(r1, 0x10, &(0x7f00000001c0)) fcntl$getownex(r1, 0x10, &(0x7f0000000080)={0x0, 0x0}) ptrace$getenv(0x4201, r2, 0x0, &(0x7f0000000180)) sched_setscheduler(r2, 0x2, &(0x7f0000000140)=0xfffffffffffffe00) [ 1909.796010] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:49 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:09:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockname(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f0000000140)=0x80) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r1, 0x84, 0xc, &(0x7f0000002840), &(0x7f0000002880)=0x4) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f00000001c0)=0x0) sendmsg$nl_generic(r1, &(0x7f0000002800)={&(0x7f0000000180), 0xc, &(0x7f00000027c0)={&(0x7f0000000200)={0x2594, 0x30, 0x8, 0x70bd2d, 0x25dfdbfe, {0x15}, [@nested={0x1024, 0x2f, [@typed={0x4, 0x93}, @typed={0x18, 0x4f, @binary="a09a3245cc288a323d01a231a97e3e00cd57c83d"}, @typed={0x1004, 0x25, @binary="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"}]}, @generic="3c1043575730eacc506f7b092276fd5f149965802e60e66c4208bfd95434ad1b6ca1146913b541deb45eab9c7633fd8475e87021e225037e69269d586c459df24a072a71bbf37c", @nested={0x1414, 0x8a, [@typed={0x14, 0x65, @ipv6=@rand_addr="7572de8ec522e7323bd0f899b9e82853"}, @typed={0xc0, 0x7e, @binary="ac5381632b38865aaf1e402862d4fac76ebca7672332b6c23650e0b756659d099c94db4826e52ad51655d079e5eb2374237ec77daa676fe36f7ce5af9a6b4c58b6b46e02f26acb252347fb2c8b3d8788e631700b21ec36705882509495a3850a37cc077afe37b43b8db27f42a1eb271739fc48df7b5732a91c95b432bc6f6e3a857c3bb5525139954a0bc21a454fee8bcb9f4cd2be051cf75e6f7f0cd002b783d396661cd8234f9d79010e9481c81e7db4dfb65181d14af0dff5d6"}, @typed={0x8, 0x62, @fd=r0}, @generic="719e7a645882f2b213359faafcd7db1d491566ea07a2205a8109d606b503c8da8386990a69838fc563e299e0e3e9402780755981903b8f159fac0f3ef3ea10b805076498084605a8973a84827f58bf6030a71f68d5515bca7525b9187172ec16a6241b5bcb85c637e1968477d2215baf3f663fbef7908d1f7dc3bef7d9c21707766f9a29f8e55f26a9b02aabdfc8bf2f04e4d0ab8cb136489b66622bd3c77ea953786ff8356a1532748b9a67c7a3ce3eb78e2f2c7c8a3f99b0cfbf2e8a134e0cd5740e29dd75474582f3950326983862207bcd1ccab0bccec68f826b484372501388", @typed={0x8, 0x3, @ipv4=@multicast1}, @generic="46e175898295a60b208423e21b68c1ebe990c20b5466c72bace59af2acc86b091ea2688a8e38714692d0df64d5e6e60c1b32757aff323b761d297df707351a4f694909e46c054c72426919978fb44c85fdaa3b36b738", @generic="2b8bd3aa93b4dc5a319b2a0be3012fe35d15dcd776cc8682311b24245fc237ae5abf64a64b5677a419de65b8aea9111149f64d0cf9eab0b020d127987b8eef294708a5164fa0d1b63eba451254e4a539e08ad4e8b0058fe7005866b9ca72fa6edeb0be9818ee0a175f60a9de0d02d1fef07a9b70c53dddf99eb89d7952a0a00806175a362f12f99034bb70df5a82942ab648755d61284adf348eabb855a5b1e12cd9e87bb8dca0c6c3e4a82b67447eacd64d99587e4b6508c5241675a9ade00768639f3a4d11de819dc27f7ac2a04da7e89aed43e55db614e1bcaeda7cc33de6dfa39d6af1de44", @generic="467db7b60e0d8445561a57d2945078dd8aac8b830151f9ba9b69daa52c7ad4996a9aaab66c7b52bda27b60b6cbbeccd0158e6365f3e1f793b486d44ea8a3cc47820e2b02e2922f64956a5c4f1e5127a0776f223139d7742b8f2df0e22bd831962ba829b71d05c9f317e30a3ab08abb451fde1b9ae94dd01a0e576708c5f018a777cf8f1ccec4e4036ad60a8bda20be837c05a992c909e087fe1342e6988c3904f85b70e32ebf86cad5520ff1290006a35699d840e2bbd46772203d2ae879e3185e574507dcfa7c923c144f805a491a3c53a161d159b02162e7001f221aa4c0545342f134ec7ab73822cdc46160ea5611d1a85838e89229db2ff06a7d9518355c8acaa42c800bad6f2508b235519490222080c49785e2a8a50f67f3ad1976c501601f5396a38575dbd6032ac58ebc3ddfeed162d563511644696ae669d56d27575e4d00aaf8c3c15c689b6ce169da194647b549a2200c0f276bca85abb9675b0c0d7dbc9474a2f00cbb447a76e0d513684d63de189e49909d9dab98e695e225e55002df4a7e4763acf28424ee8bf60c3ccbd791c6ca298449aab52c822ff4ff243c2aafbba412ff2d94f8fdf397b95e609d73ea600d75c82ce124f2e1a867bb4cb6ab7d7d79c245a9502326cd11e8d149d229c93f76baab3a2b55025998b9aac31a61a433d04a2bbcd3ad3dfd1cb85c5ecda6e3923df391126e51dfbdf294a6c7f12c2bed639fda9e399119b45cc9a6e015df6f560dace596ebdee452fc1479384e88c543445c2f41fd8eb358b6df9adc760acd349e0ce91416231508472b7fbc5ab171af7d4beb03884fc89c7eb62ad631da113d91d7665ec65a7ab15e03195fc3fe6b58afa4526642c39d1afc3145e5b99800bde66e5c8c7595e9a6f0b46f7e02f81a4a94f0073318fe6263a561b23a74b468d32c76db1833c7d2cc92573d8e4af7da7358fa8d19b306054bd4579477935e5ce892193e8e5b85da29ccc84f8908c62a0866d768df10eb5fa36b63addb2ad24567cb49dd5300b72cebbd29904918614598045abe151136e0dd7a573d26c9c4f36d3cb1d22ad01694d68a55bc54ba3e8a1151c4be66657e4309bef838fd60c96c0da838064dbe76bb012e3fe205375be74b508a3f21aa3a5e3f9c1651cddaaf591ff465be17411db0cdfc7633ee1e683fb9ae55440be1da8576f39e3c5164b2e95a42a6271bf4f2cd5db5b313b4a0d60791483e468c67788fcb46ee2639df8895f03a574961cd3570b790c233a5050c2ea4435b4a3390a05b77632d935d4f65ce7d9bab34709eff6737d0cdb91188755e6097edd243b4a0a83ca6ab9e84439499fa7f6822f9e439b2beb32f63a1f44ff3d18a8325fad2d5fbbbfee0309dece7dfc852f675068ba8d1f4859049fede0a1cc4af2ef6d0d825a6b7e2c9655c21a92810c188a368ca3eb810d17a7b7950787f98803bde6622ce0a2b8fe8b559c8a49f988619f09f8b575feb717a45eea8de47e6d0ede15670e443cceaff89b52f019a5d06fbc46b76ad93f6f946da6c2e7ee22a691f2291c47f1bcc8559d4019502fa7dad3f68b25dc198770a9a652e7d8fa04df91d4460ac0da629275c942994102d153e2dd4316a4ccb8ce0bf2774c2a5cbd94d6a9947ef818e26972b9eaab0d241cdb02c6f6057a6a8a2a2e2eaee0ec0154bc987afbcc0669ce6eefaa3ebeb9ab3ef38fd4c989e2f51063fbf0a6183afec499ed1ce64bc8153aef0f8141d39f50dd93fe70f9b90bc7bec6f6d5e3395063173b9592a8d04ed0b775638cbbeb247dd493b8a472997aaf1380e1f58b053fb1d800a4fa1576ecf898c6865f10fd8ad6112b1beca39ebfdf7d6f4de71be20f2ac056feff9018beafbca4f1e5570c1ee461230ae40e20e9ccf00f67a49a116759a9fb8c410d6a2578b0e4e366ca43022eb1fdb3b49f2a75855a52242ad8e4020134c416ba6cd31a1ca56704297c5f8ea9d4885006a03d6680fd4690962cc847b5c7d9f7e4f7f6bc98b67a2328c01241bc4c03f0b81db64a04e8a9dca19bd13ef8cef22f438513bdc1c9b41df344ea1f81a57f1f0a3a3af8dc4519901af43c2f32cfc2e7e8ab3112efa98f566f9eaea18a027a1e8339c9a2c39e370239e1a2a689950358a1aa03bec33de1a03caad996384cd1feecac98d6c24dc440f49543310a774360dcefcca3fe698e3aca49b44ecf69de92d488591208e3cbbcc07e65ecb7eeb95d7b99d0fe7b8f5b6247b5ea5ffbbfefce4f684a95cde805a981c347adeb2f541267e1807b454b2ca5cd66a4b3e855c285c2cdb145b685d88c9afbd1cb0ba6c5abaa26cc0b184e48ed89c7533e0b89a66320b3125908d3bd0b6313fa43fd16d356656dbe71a35f9d4f3bf91cd1fd9627964eac62dffc084ad7d9ebb8007462edf619d455a7f6dd4e372ccafbf0d6c3a2f8ba79512d3542635a60db1de41451474365050b055b6ebad2e2b4354ef086b2a02aff500dcbadb581cdabb8fb6f2ed913a2f231d2853d00e0ecd4eec6b354a7ca4ea7146e48fd5c104f1d96eaeae4d55ceab8a2f295213d7e7fa35eee700e07282a66c2b1c462658ee0e274b3136946fb7910407e4cf7e34d0e941dc6ca5bdd3a57349598ad3276214581164d77375582772fb72b5d334b82657ce7b5827ed80885015c3f8ed62d2220c2a6669bf90abcab39bab9de8d0c37ad8876a7ec36c2a24f48e69b78878c3ff96bc68e0e628896033961c205bdc5a2626f22dea51011b76486577b71b2b741d95d50668bf91268a3a8c1db90e0ebb1a21cfdd6c2622692954449eaf258f1691010dcfd35aaea6d558d937dd29c469cd6b069c7c89ca14df3927b8bf2a20f50ffab0bfb06da7e979821bbe8b435d0de51dffd7547631f8121594c46cb3f19b28cce03d795b583fb4f5254e6280d0b5f55392d18906a03ef8715a17f47aec15872bbd281ae32e5efd36b89a25b43b8c51d8f840eb58d77ca3542b3141c83fa1d3ea13a975bcda47ed45ae358c69ed2b2dc2f174e9a5926322f0ff6797921843027a8bdf23cd5dfb4f841b55aa90d00f76be51175c06a8bdf35044bc39d9a39cca603753e8695843e3c1037522ad3f9c3f5e3cbc24dfe30d80e5ddf3faa1b675775aa1d0e0e09328998f501acb69e5874a88e0148cc4e7ed53654ee7861696d76ad73e8098d880dc0c9614f62293b367b20734ed876dc1e0b1077e69c419fa7a9b0c0f456de9bf316bba2141edb9fe13b4a1c7cf9812e60bd43fb01b7e10f1daaca09e061e82569395586f143140976368d78ceeaab38ae3e74a08f8a289b576c3a732d3179d7ad68f4822b0cedf281a40cb7fac30860d310ef2369455010d57670d68ae33d8ea11acc672538511d74e6f21d77fdfc0387f325f8b93c4622af11c07309f2336fa600eac2029baaa69003e376872e00340e0a2bcaf379cd1e8be1e9e09824df176604ff858298bb70e74860b3ca3f9a63cfdb62d1b8d49491053f550c2142f99370a7f7b5792c72e5adccc46d6faf8ce601b79af5248072e3b089475ef4ad41c6fb2a0ef11ebcf56d910b0f242bc430403a5d09bffcc7f9a57b3fe6f6f14d4aff7211447239ec4a07321a18e3afa976e05357ad032d85d192d1ca88aa8308f29397145605d69298ccb0bfc7c7e0a2c40ec7fe7daf71e39c157286475a75f49585a603cc081e52267f283e2c943ae5de1b15a0fb600e1daefd53814f08a301ad87086b32ab0c2d8b20ff27566e4bc2565d1fd27408ade0676adff1b505f51da38ffed7557adee1394172044afd8b9a5c375f2d268c414a4a7bff02bfb5f83550e623d175a57d5ecd85d3a9716dff5db246e19b47b2999f1cb59e15e9ab5b260d4ee2a436562a7f736753d15e6c5acb9c2fc5afb7fe2ee24df725c565725f9c756c9b0a09405fdd9d73eb2c7e58c4c517cd96202e5ab4ac573f3a371e7462a269b48e767d3112279be3796113b2b94f4b7bc7706f13b1e3f7b16ea7c435f1ada2a979fc4caebfd4243a078a5899f34f477178dd79348e37fc06436e23afc16e2ad1cf815fcd119b2ed28092f99632ecd0a380b68ba2946fe1de28d8ff20eb0971c131d1431f8ee9bd9028adadcc0234201e444c664452fd3c98dbc92146c033e7bf967559654bc1f9ed915d7a73f0905651be6387e504f77c90adac77683ef562099043af41892f4ccc2ffbbaba89009623f702f4eeeacd7f930c547ffc513cdc5361ae027cfaeabc81ac9033619947298542089cef8260a212891454686e8e3b3230b071ba89d988edfb193bec905fc07366b6d50cba2cec2965c51d068d93dc7dd295a5a0e3702d4e879aead8b3fd16299ff1482615a6c8a122ce6d44f5a2e2bc23cf25d83024d9957e230523d57e83b46104f1712f22c7d4b35ed95d473506329b87ce87f183a58d1142924f63f1ae553ed9415c951b409a127799fae37dec52c4c538b58eee7723e831ccaeca51f9d528dee46095507c8f5ab14820c504c7c722aa424cd6fbb9ed48938101e99432afae0424db58d7d76c63e8b7e0788615fc658a6ba6373b6694ceca30b25e0d1087aa9bb3bd6f282c905d7f046dbc26979e9f39be010c65fe7eba52b2cbcea799fc35d5a6b05d62558c835196287f3cc7286c97836bc0cbb21426c411dff2bab58a5f573cb304c44577f0badf3421e145f454ec6c426b87a2cfc2e7331c644feabe192a484f400035bb646136460eb13bf8ddd65762a5890e1c72813ac80081c2a85bdbbd54ca8e1bff6ad39564b05adb2ebe6a55414ecca6a30121b7ae125f02ac62c9d2832448c2dfb42fc6f4f1cdb63ccbac1a537430feca0b362a434a2ef9b3c323d8eaa9869fd5cbac77be4c6d0b63c1757d9444b99a8409b35b3b601c7640949bded074c2f1fd5b7c334270146602310dd1367687ba67ff6d7eeadd4939a6a2e13d000629098f7dcdeb2bbbdfde4268fdab42971cc8553dfb4b1691ec34dbdb058e10fe390eca37eba9830fa65720619f3ae272474fe6da0dd596c8c59e858be47c98634d5c6fc0ae3c40d564c455de0ea8c5e241907573ab656844c8154d0749cb471feb1aaf1442d3844930934c5c1b973329fc81d24b97d2cf8d38468df16ab5d9d347ab8730c6e999463bb40368cd96373e436c171896c035c480de41e593771f7e3ae61c681e383531fedcd532086ac5f351874a6aaf087af207f7562e13d22ffa3cd21198787b1ff62ceb1d82f90c190f732c0df8c0d05d2cd0116c78b2e6acb70c9e4dd2e3009270664f01c85313d0541a50034fedcba7342e69a4db726a6641c721ccdf99685268c99bfe6bdba6cbee7d4cf1c13a6cb58da5a507114d6e409313ac2306861c101b69a367762d42550cb826476db8fd832732560534966a93ca49b3a3df81ee4e1cdeb1f41ff78ab3c3c9d21b2a01508a5df5ec7ef181bc07fe0ee1ede47819219eec66b486b55ad7bd1e59c501d71ea23be33cd91202cbf4958f791533e1c0420c5450b31584d68695956bc25b42a6dc440bc6135a95809b0b83cb5cc1f7dae2270a75232e41d5d29710fab8f39b3a9c752cace60f7a57bac6391cebbba0e5073c2e00d52c758687a9084954a2c3308ba1c8d536f9305dc6972b6286e19e3590a7f7fedfd6ddf435696dbfaf7f9a8122e18302a1cbaae6481916fa143306d2bd74fa5b3550e5c5eea740812d02f9dca271528d6f2244c640428e5308ae38e8a9128919667c9ed1b30a3d97b5d661c17c2c81aa47f3550db727fea571b3a0fb6d979d44871305dcd11b84a1a3114e7ccb87567564e54cf790dcdd595fd9152d0c5", @typed={0x104, 0x5d, @binary="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"}, @typed={0x8, 0x7e, @pid=r2}]}, @generic, @nested={0x100, 0x15, [@typed={0x4, 0x2b}, @generic="7ff8935e4f1479567c9aef9c42255e103a60d2f3dc121f1822d874315de0b5971ce79ddb71168ef0c00e0de31c7c156041776c1e61a796b6719e18b0bcd9b4301206d4f4a43c08cd68025c1871668f4ff3b26eaccd268b0728d6916d3953a831fe5500472f883eb0496b96816492084836b086db2f84444efcea467cf01e13712b69c1d05a842bdf2c6416ceedfbacec864ce04fcd609bb9ba4937940c5f4f4f125e57dea1f0f3e0d7813cc601da8a4f67f37fb052a19e5c4f52d5f0d816f5e78cb8c34fc423cbd39d7468315cf5c136f296a548b192c22381292773606ec4b6461227d5382eeed33db65bff8648de7951e86bfcc77715c2"]}]}, 0x2594}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 18:09:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000180)={0x1bf, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$sndseq(r0, &(0x7f0000000140)=[{0x81, 0x3, 0x3ff, 0x8, @time={r1, r2+10000000}, {0x7, 0x120}, {0x7f}, @connect={{0x9, 0x64ec0000000000}, {0x9}}}], 0x30) [ 1912.566318] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1912.576739] audit: type=1804 audit(1548094189.237:71): pid=12342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir915374627/syzkaller.r5InmE/152/bus" dev="sda1" ino=17784 res=1 18:09:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:49 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x140, 0x0) ioctl$TUNGETIFF(r2, 0x800454d2, &(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) 18:09:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x5, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:49 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) lsetxattr(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000280)=ANY=[@ANYBLOB="030d01000000002b1872cc090000002e3d59bb0100"], &(0x7f0000000240)='/dev/snd/seq\x00', 0xd, 0x2) fstatfs(r0, &(0x7f00000002c0)) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040)='TIPCv2\x00') pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$CAIFSO_REQ_PARAM(r1, 0x116, 0x80, &(0x7f0000000140)="230aed8814f4e398a1347eee991594cc11157e2a808c8521f0833b1031fbe0920b4474c870a5d8018f46086f5a2d4fd2ba42d39d7957e6b08feda304f707e17023", 0x41) [ 1912.811731] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:52 executing program 1: openat$vimc1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video1\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) prctl$PR_SET_UNALIGN(0x6, 0x2) 18:09:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000040)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x0, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:52 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x121080, 0x0) getsockopt$bt_sco_SCO_OPTIONS(r1, 0x11, 0x1, &(0x7f0000000140)=""/199, &(0x7f0000000080)=0xc7) [ 1915.586737] audit: type=1804 audit(1548094192.247:72): pid=12382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 op=invalid_pcr cause=open_writers comm="syz-executor2" name="/root/syzkaller-testdir915374627/syzkaller.r5InmE/153/bus" dev="sda1" ino=16609 res=1 [ 1915.651448] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x80001, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r2, 0x2400, 0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) r4 = openat$cgroup_ro(r2, &(0x7f0000000040)='memory.events\x00', 0x0, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000080)) 18:09:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:52 executing program 5: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000340)=0xa000000000000005) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = getpgrp(0xffffffffffffffff) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r1, 0x40046207, 0x0) setpriority(0x0, r0, 0x10000) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x1}, &(0x7f00000002c0)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000004c0)={r3, 0x516, 0x20}, 0xc) r4 = open(&(0x7f0000000180)='./file0\x00', 0x40, 0x1) setxattr$security_capability(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='security.capability\x00', &(0x7f0000000500)=@v3={0x3000000, [{0x0, 0x4}, {0x692, 0x2}]}, 0x18, 0x0) readlink(&(0x7f0000000080)='./file0\x00', &(0x7f00000008c0)=""/16, 0x10) setxattr$security_capability(&(0x7f0000000600)='./file0\x00', 0x0, &(0x7f0000000200)=@v2={0x2000000, [{0xe24, 0xffff}, {0x2}]}, 0x14, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) setsockopt$bt_l2cap_L2CAP_LM(r4, 0x6, 0x3, &(0x7f00000001c0)=0x4, 0x4) write$tun(r1, &(0x7f0000000380)={@val={0x0, 0x8808}, @void, @ipx={0xffff, 0x100, 0x8, 0x11, {@random=0x7f, @broadcast, 0xb6c2}, {@current, @broadcast, 0x7f}, "f35a51747507618986a72fcbf7f1dc3caee84dd9f65b3ea460840476f7494a804760c8b16328f0adb130aec496ae1313c6a5ca4d6b67798fd0bc9991b70411ca62e3aae9ca8d1dc1a29e151b00e8661f0feb0c4e4dd793c31ca3e7f4421c04ae0fcb2ec43c0e8ca47f026109fbb3a43f7019a45a83fc3fbe421361b64f891a2fd5d0ef5073f9ed4729037704c4de398abc48f70e80c4c6cc62c40342ab17f33e403f7e51a1d3cc1a52c1a83d293600598f5455a5a7b18c083f733e1c059ea9411021f091856fdf1032c6a187735c1fe83758d2f34bbdeaa82cc12357cb8a0fc368da"}}, 0x104) execve(&(0x7f0000000300)='./file0\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r4, 0x40a85321, &(0x7f00000000c0)={0xfffffffffffffffe, 0x800000000000000, 0x5, [0x0, 0x0, 0x1f000000]}) 18:09:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1915.860168] Unknown ioctl 9216 [ 1915.886951] Unknown ioctl 9216 18:09:52 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$KVM_GET_PIT2(r3, 0x8070ae9f, &(0x7f0000000000)) [ 1915.951159] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1916.199789] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:55 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$null(0xffffffffffffff9c, &(0x7f0000000000)='/dev/null\x00', 0x880, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r1, 0xc0505350, &(0x7f0000000040)={{0x7, 0x80000000}, {0x2, 0x4}, 0xfffffffffffffffe, 0x1}) readv(r1, &(0x7f00000003c0)=[{&(0x7f0000000100)=""/12, 0xc}, {&(0x7f0000000140)}, {&(0x7f0000000180)=""/190, 0xbe}, {&(0x7f0000000240)=""/54, 0x36}, {&(0x7f00000002c0)=""/228, 0xe4}], 0x5) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) 18:09:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:55 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r0 = openat$null(0xffffffffffffff9c, &(0x7f0000000140)='/dev/null\x00', 0x200000, 0x0) accept$alg(r0, 0x0, 0x0) write$selinux_load(r0, &(0x7f0000000840)=ANY=[@ANYBLOB="8cff7cf9080000005345204c696e7578361e43a28b96830e8843f923407520ec55c5e1fb17a4d53b60995722d3511e82129381deecf0357d3390093eec0d1b047c286f061a2e1fbfc5e59077d77849de949aace41fe21f349ac7f8c1b2d2078ca229dbba58d13d6a3207bb63a433e6da118c6ad4c428b5d91111f1cdad0b5e8c546e899894b7bfbe8490b4fd8111061e49596a611ec51333268b5fd30394b56dcf2ede0f054436655f8c13b079634101e88dd5495366f0836c48e842f98ce52c254de6080ae7115063cf4a5679bb4c6c7ec239be1335f008d321b9a5f5929f8be2a5d641dba2c87946fa17174d8b4b9ffe86cacab6001cf5754e1df663969f0c0b5eb7f1ce5c896963c3cacd689dd1c91390e919da9ceee5721c68b475eb559f19e1d1e248dff645e12e9b4d7071d048bd3dafeed1977a31af575855bf1e75e5cc7d20fa6b9cda1f233ce8bededbd719b24357776cb25ba15ce04499891b3f1435977ea3c5bab92bf81bf340e8d47acc5c5ee55b409be71bc26bd5b8ea273276281a211e89733ebca4db84e5fee68f10a25069faa9ab15127ecbeeee9229c5ee3a5ac65a0d411e3d61a5c98e7e43e74f22c033f0b7601c964dc6488ac958a8ce803d0cbb652f2e8474430d1d"], 0xffffffffffffff4b) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000500)={{{@in=@initdev, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6}, 0x0, @in6=@mcast1}}, &(0x7f0000000600)=0xfffffffffffffe1b) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)=@getqdisc={0x38, 0x26, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, r1, {0xf865bc753543ed92, 0xfff3}, {0xf, 0xe}, {0x0, 0xe}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0xc4daa0bcb89ea035}, 0x80) setxattr$trusted_overlay_nlink(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.nlink\x00', &(0x7f0000000080)={'U+', 0x5}, 0x28, 0x3) 18:09:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1918.746753] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:55 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xc000, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000140)={0x4, @tick=0x6, 0x2, {0x29, 0x10f8b35f}, 0xffff}) ioctl$VIDIOC_SUBDEV_G_SELECTION(r0, 0xc040563d, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, {0xd7a, 0x9, 0x8, 0x40}}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:09:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x2000, 0x100) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_NEXT_DEVICE(r2, 0xc0045540, &(0x7f0000000100)=0x6) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x82000, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, &(0x7f0000000040)={r0}) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r1, 0x0) 18:09:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xe, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:55 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mlock2(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x4, 0x800) ioctl$VIDIOC_S_FMT(r1, 0xc0d05605, &(0x7f0000000200)={0xb, @sdr={0x20303159, 0x401}}) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x1, 'veth1_to_hsr\x00', 0x3}, 0x18) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x4d0b, 0x6, 0x3, 'queue1\x00', 0xffffffffffffff01}) [ 1918.994600] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:55 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r1, 0x0) [ 1919.045213] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:58 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) umount2(&(0x7f0000000040)='./file0\x00', 0x4) r1 = open(&(0x7f0000000140)='./file0\x00', 0x4001, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'team0\x00', 0x0}) r3 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/sequencer2\x00', 0x600000, 0x0) bind$xdp(r1, &(0x7f0000000200)={0x2c, 0x3, r2, 0x15, r3}, 0x10) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x100, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'veth1_to_hsr\x00', 0x0}) getresuid(&(0x7f00000002c0), &(0x7f0000000300)=0x0, &(0x7f0000000340)) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f0000000380)={{{@in6=@rand_addr="f6ca160ffdac4c9b6a2549fbddc4e9fd", @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x8, 0x4e20, 0x20, 0x2, 0xa0, 0x20, 0x2b, r5, r6}, {0x796a78ac, 0x6, 0x6, 0x5, 0x9000000, 0x2, 0x3}, {0x402, 0x10001, 0x1, 0x9}, 0x40, 0x6e6bb5, 0x2, 0x1, 0x2, 0x3}, {{@in=@multicast1, 0x4d4, 0x2b}, 0x0, @in=@rand_addr=0xfffffffffffffff9, 0x3507, 0x3, 0x3, 0x2b4e, 0x8, 0xffffffffffffff81, 0x10000}}, 0xe8) 18:09:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000100)='/dev/uhid\x00', 0x40000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f00000001c0)='\x00'}, 0x10) r3 = dup3(r1, r0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/loop-control\x00', 0x3, 0x0) r4 = accept(r2, &(0x7f00000002c0)=@caif=@rfm, &(0x7f0000000340)=0x80) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r3, 0x84, 0x1b, &(0x7f0000000380)={0x0, 0xbb, "a43c0b74c8853d2da7de1aa93d762ac968cc15e1bca96214347751126f7eb13827ee53cc8675a3abb9d8546e1afbc726c843c8720d6020cb4148b28f0b7d03cf1cfde6b37b74b8bc27bf565590f1d95cdd1d2741ff2436ebef840820a7e54437f44d3e06805fa4e38adb1c752406be37786947ab6fd17627aa1a9124ed9f46a4618bfbb6913274feaff80ec1ee607669ba2d8cd49bcc92b213710880c8377eb27703753a91288a101f190f40348d96342cd6669534b937e7fd0d32"}, &(0x7f0000000480)=0xc3) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x77, &(0x7f00000004c0)={r5, 0x7, 0x3, [0x6, 0x6, 0x9]}, 0xe) ioctl$EVIOCSABS0(r3, 0x401845c0, &(0x7f0000000180)={0x80000001, 0x7fff, 0x4, 0x80, 0x6}) perf_event_open(&(0x7f0000000000)={0x0, 0x70, 0x8, 0x0, 0x8001, 0x40, 0x0, 0x5f25d638, 0x100, 0x5, 0x9, 0xeb, 0x7, 0x1ff, 0x20, 0x81, 0x5, 0x750, 0x40, 0x1f, 0x2, 0x100000000, 0x6, 0xee8f, 0x7, 0x830, 0x9749, 0x10001, 0x4, 0x0, 0x4139, 0x0, 0x1f, 0x89bb, 0x0, 0x80000001, 0x80000000, 0x3f, 0x0, 0x5, 0x2, @perf_config_ext={0xb13, 0x100000001}, 0x84, 0x3, 0x2, 0x3, 0x7, 0x0, 0x8}, 0x0, 0x8, 0xffffffffffffff9c, 0x8) time(&(0x7f0000000200)) getsockopt$TIPC_NODE_RECVQ_DEPTH(r2, 0x10f, 0x83, &(0x7f00000000c0), &(0x7f0000000140)=0x4) 18:09:58 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:09:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1921.817193] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x40000, 0x0) getresuid(&(0x7f0000000200)=0x0, &(0x7f0000000240), &(0x7f00000002c0)) getresgid(&(0x7f0000000300), &(0x7f0000000340), &(0x7f0000000380)=0x0) fchownat(r0, &(0x7f0000000080)='./file0\x00', r1, r2, 0x1900) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup3(r4, r3, 0x0) getsockopt$inet6_opts(r5, 0x29, 0x39, &(0x7f0000000100)=""/202, &(0x7f0000000000)=0xca) 18:09:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.events\x00', 0x0, 0x0) getsockopt$bt_rfcomm_RFCOMM_LM(r1, 0x12, 0x3, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$VIDIOC_SUBDEV_G_CROP(0xffffffffffffffff, 0xc038563b, &(0x7f0000000240)={0x1, 0x0, {0x8001, 0x1, 0x2, 0x5}}) getsockopt$bt_rfcomm_RFCOMM_LM(0xffffffffffffffff, 0x12, 0x3, &(0x7f0000000080), &(0x7f0000000140)=0x4) 18:09:58 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:09:58 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) r3 = getpgrp(0xffffffffffffffff) sched_getscheduler(r3) 18:09:58 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000240)={0x0, 0x9, 0x3, [0x0, 0x0, 0x1f000000]}) [ 1922.133847] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:09:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:01 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x48, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:01 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(0xffffffffffffffff, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r1, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$KVM_ASSIGN_SET_MSIX_NR(r1, 0x4008ae73, &(0x7f0000000080)={0x1ff, 0x1}) 18:10:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1924.951903] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000200)={0x1, 0x70d1345, 0x8}) r1 = open(&(0x7f0000000040)='./file0\x00', 0x100, 0x4) ioctl$VIDIOC_SUBDEV_G_DV_TIMINGS(r1, 0xc0845658, &(0x7f0000000140)={0x0, @reserved}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:01 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) socket$inet(0x2, 0x7, 0x1ff) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:01 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4c, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:01 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1925.182545] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:04 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x60, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:04 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000)='/dev/audio\x00', 0x2, 0x0) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r2, 0x84, 0x6, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0xb}}}}, &(0x7f0000000240)=0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000002c0)={r3, @in={{0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x19}}}, 0x0, 0x7, 0xc12, 0x2508947e, 0x8}, 0x98) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000080)={0x0, 0x0}, &(0x7f0000000100)=0xc) getgroups(0x4, &(0x7f0000000140)=[0xee01, 0xee00, 0xee01, 0xffffffffffffffff]) fchownat(r2, &(0x7f0000000040)='./file0\x00', r4, r5, 0x100) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) dup3(r7, r6, 0x0) 18:10:04 executing program 5: r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400080, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x18, 0xfa00, {0x4, &(0x7f0000000140)={0xffffffffffffffff}, 0x111, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(r0, &(0x7f00000001c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000080), 0x2, r1, 0x0, 0x0, @in={0x2, 0x4e21, @broadcast}}}, 0xa0) r2 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x40a85321, &(0x7f00000000c0)={0x9, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:04 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x58080, 0x0) r2 = getpgid(0xffffffffffffffff) r3 = geteuid() getresgid(&(0x7f00000015c0)=0x0, &(0x7f0000001600), &(0x7f0000001640)) [ 1928.033169] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. sendmsg$unix(r1, &(0x7f0000001700)={&(0x7f0000000140)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001540)=[{&(0x7f0000000080)="07d4ba55f315348e44f694005a590fcd343b644dc46bf01f57c53f3a32f82c9c1c7868ac9d3eae73ba3694bace09", 0x2e}, {&(0x7f00000001c0)="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", 0x1000}, {&(0x7f00000011c0)="3b69e1a0175aac217ce18eb40cab522d2287da43c2302cb52b88743bc47e78c0b93eea2603e855935a49afd7532c16c242e37a637c7586e2505fcb9778556ddb3bf7818674995d44545bb8df40b2402e83535b4fa75aa550d93213de38da8cae8157f54b84c8bf106c9f0a07ae7e3bb0065fce2cb80b1222354b24d36cc303303ba24f0faf002efdf2714262d0817aacb9dcc975fae272a1bc4d41a69645ea32af2f5a8d1856c81a9400870fa4d4dd71e1552dfa764fe9281d2d1e50fed4bc3116a7b18e9dc60f69fe880d69", 0xcc}, {&(0x7f00000012c0)}, {&(0x7f0000001300)="43197256d1eaa3ec2efd0676f6df17d08d42df0d847684f37f22788e507034cfed8ba24730f678adaeeeddb385c062fb2e08dbe9c9150c4ada298dd51b85b25d48c3254be1ab532e9f1dfb05d2f8885431ae4e4b6b6c58c51b00f6cfcfe876dca95aaf71d2bf7e00577f6c08d8706b5e43e6b3e5f612c349548bbd716c3173", 0x7f}, {&(0x7f0000001380)="efa43ac555c90b46c5a46b7d1e1c6c886b20d812790853209efbfe027e1289a882b73b66c5337a12413d6ff63e4b78d1f61e7a87fb05fefddfd892d3297dfa2a545a2a9699b58c502ec912ff1d4a9705f48707acfd7bc0614f2e71ab7fd6b17671dbd3e6f6cfd412835891b769b0d4fb983c3ec6ce4f97f5030b6f622863f5cdb5ea8273db00347c5d538be3f3c0c043", 0x90}, {&(0x7f0000001440)="53f4f21649003ef7bfa8d6faa3a671ee0fc23dd5da99b5c41a37914d362a8ed3d1c640d5e58355d46d7c4a7d5da67f82ed24e50d280ecdcc946aa04099715d4419d78bf03ca6b2bc6ad53189b686b046ee78d31be0a81fd5acf884f4cf330ff51e4b846eb6f92c3e8380328c68e2078b2864883aab4a2c3ea79b549348ea9bc5b6a7e47e17f118d28d04f95f2eb998d5049aed44179f17bbb84169388d90d74a95b0750ace3e5700b2d9b8aff4467d00cbe7c69c77524cb3cdcbab036ec4b29e7ef15194cc036ef7965278993f5f9ad7e0df1059f9", 0xd5}], 0x7, &(0x7f0000001680)=[@rights={0x18, 0x1, 0x1, [r0, r0]}, @rights={0x20, 0x1, 0x1, [r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r2, r3, r4}], 0x58, 0x80}, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:04 executing program 1: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x800) getsockopt$inet_mreqn(r0, 0x0, 0x20, &(0x7f0000000100)={@empty, @loopback}, &(0x7f0000000140)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$KVM_GET_VCPU_EVENTS(r1, 0x8040ae9f, &(0x7f0000000240)) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/mls\x00', 0x0, 0x0) write$cgroup_subtree(r4, &(0x7f00000001c0)={[{0x2d, 'rdma'}, {0x0, 'cpu'}, {0x2d, 'cpu'}, {0x0, 'pids'}]}, 0x16) dup3(r3, r2, 0x0) openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/mls\x00', 0x0, 0x0) 18:10:04 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x68, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:04 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0x3, 0x40) ioctl$TIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1928.305548] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:05 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000c}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, r4, 0x400, 0x70bd28, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) 18:10:05 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6c, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1928.625012] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:07 executing program 5: ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(0xffffffffffffffff, 0xc08c5334, &(0x7f0000000140)={0x6, 0x0, 0x80000000000, 'queue0\x00', 0x71c5}) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$UFFDIO_WAKE(0xffffffffffffffff, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000ffc000/0x2000)=nil, 0x2000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000240)={0xffffffffffffffff}, 0x2, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_JOIN_MCAST(0xffffffffffffffff, &(0x7f00000002c0)={0x16, 0x98, 0xfa00, {&(0x7f0000000200), 0x3, r1, 0x1c, 0x1, @in6={0xa, 0x4e23, 0x1, @rand_addr="25042ec9b5ee3be66eff3195eac4e7fe", 0x80000000}}}, 0xa0) 18:10:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:07 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:07 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0xa002, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x8fc, 0x0, 0x1}]}) dup3(r2, r1, 0x0) 18:10:07 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1931.129120] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:07 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) dup3(r2, r1, 0x0) 18:10:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:07 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000001c0)={0x0, 0x2, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:07 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7a, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:08 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000040)={0x8, 0x8, 0x8}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1931.403713] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:08 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4$x25(r3, &(0x7f0000000000)={0x9, @remote}, &(0x7f0000000040)=0x12, 0x80800) dup3(r2, r1, 0x0) 18:10:10 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x0) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:10 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:10 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:10 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) dup3(0xffffffffffffffff, r1, 0x0) 18:10:10 executing program 5: lsetxattr$trusted_overlay_opaque(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x8040) openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/capi/capi20ncci\x00', 0x0, 0x0) setxattr$trusted_overlay_opaque(&(0x7f0000000140)='./file0/file0\x00', &(0x7f0000000180)='trusted.overlay.opaque\x00', &(0x7f0000000200)='y\x00', 0x2, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x200, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000240)='/selinux/status\x00', 0x0, 0x0) ioctl$DRM_IOCTL_ADD_MAP(r1, 0xc0286415, &(0x7f0000000280)={&(0x7f0000fff000/0x1000)=nil, 0x90c8, 0x0, 0x80, &(0x7f0000ffa000/0x3000)=nil, 0x20}) 18:10:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:10 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) write$P9_RAUTH(0xffffffffffffffff, &(0x7f0000000080)={0x14, 0x67, 0x2, {0x80, 0x1, 0x2}}, 0x14) [ 1934.222104] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:10 executing program 1: r0 = syz_open_dev$sndtimer(&(0x7f0000000100)='/dev/snd/timer\x00', 0x0, 0x40000) r1 = gettid() fcntl$setown(r0, 0x8, r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r3, 0x8912, 0x400200) fcntl$getflags(r3, 0x40b) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r4, 0x2) 18:10:10 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:11 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) clock_getres(0x7, &(0x7f0000000040)) [ 1934.479800] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:13 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:13 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) fsetxattr$trusted_overlay_nlink(r0, &(0x7f0000000000)='trusted.overlay.nlink\x00', &(0x7f0000000040)={'L+', 0x100000001}, 0x28, 0x3) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:13 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x40d, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:13 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x20000000204003) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000000)={0x0, 0x0, 0xfffffffffffffffe, [0x0, 0x0, 0x1f000000]}) 18:10:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:13 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040)='/dev/audio\x00', 0x88000, 0x0) ioctl$IOC_PR_PREEMPT_ABORT(r1, 0x401870cc, &(0x7f0000000080)={0x0, 0x100, 0x3f, 0x200}) pread64(r0, &(0x7f0000000140)=""/195, 0xc3, 0x0) [ 1937.322408] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:14 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x8000004) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000040)="0a5c1f023c126285719070") r2 = socket$inet(0x2, 0xa, 0x8) syz_emit_ethernet(0xfed1, &(0x7f0000000100)=ANY=[@ANYBLOB="ffe0ffffffffffffffffffff08004500001c0000000000329078ac14ffbbe00000010000000000089078992302c39d39af878ebf887094668ad869d300000000b15a1804edcb11c59e53c644904f53f0bb8be4a2d039491983ef912bf441e26dfad7c157941f85ac9ab2"], 0x0) r3 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000240)='/proc/capi/capi20\x00', 0x40000, 0x0) r4 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/btrfs-control\x00', 0x80000, 0x0) ioctl$ION_IOC_ALLOC(r3, 0xc0184900, &(0x7f0000000300)={0x4, 0x6, 0x1, r4}) recvmmsg(r2, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) listxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=""/148, 0x94) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r5, 0x0) 18:10:14 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x500, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:14 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0xfffffffffffffffe, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r0, 0x80045300, &(0x7f0000000080)) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_DISCONNECT(r1, &(0x7f0000000200)={0xa, 0x4}, 0xc) ioctl$SIOCGETNODEID(r1, 0x89e1, &(0x7f0000000140)={0x4}) [ 1937.583036] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1937.634597] syz-executor1 uses obsolete (PF_INET,SOCK_PACKET) 18:10:16 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={r1, 0x1, 0x1, 0x3f, &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}, 0x20) fcntl$getownex(r1, 0x10, &(0x7f0000000180)={0x0, 0x0}) syz_open_procfs(r2, &(0x7f00000001c0)='limits\x00') 18:10:16 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:16 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x600, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:16 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:16 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000080)='/dev/uhid\x00', 0x40, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT(r3, 0x28, 0x6, &(0x7f0000000040)={r4, r5/1000+10000}, 0x10) [ 1940.385952] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x700, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:17 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) fstat(r1, &(0x7f0000001700)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001780)='./file0\x00', &(0x7f00000017c0)={0x0, 0x0, 0x0, 0x0, 0x0}) setreuid(r3, r4) ioctl$DRM_IOCTL_AGP_ALLOC(r2, 0xc0206434, &(0x7f0000000040)={0x2, 0x0, 0x10001, 0x20}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) io_setup(0x3ff, &(0x7f0000000080)=0x0) ioctl$VIDIOC_SUBDEV_G_FRAME_INTERVAL(r2, 0xc0305615, &(0x7f0000001840)={0x0, {0x6, 0x8}}) io_submit(r7, 0x7, &(0x7f00000016c0)=[&(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x6, r0, &(0x7f0000000100)="1e2123baa93839976f569a6257972cb919b4280898fd42b51ba2774c64727a513fd29898d293bb7d2e542618f6e98776679e9ad8da0136b9e7989475a8a91b1bb33b1b3edbc0d1e96c6764e587a8eb5dc9e3b755296c91e47374b50807774cb75d39a1f19eccb497862abe6d867d26f260b495e5c23c99b8d1b8e6fb72bf0bc137aa5da5f7fa506b0b809185684e", 0x8e, 0x8, 0x0, 0x2, r2}, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x8, r6, &(0x7f0000000200)="cb7ba6aa73a1da31aef2592b", 0xc, 0x4, 0x0, 0x1, r2}, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x7, 0x9, r6, &(0x7f00000002c0)="4b2c1ee0ea6249de16acae38532d03fb2b3f343769eff85e2fed7dd3fa659e5441b7d6042ed34eb15b0ea70938932aa284676f9ae9c5f34a03bbfd3ce4ba9ad346669437ec8b0662b517af915140eb766088a1c879b4c67910019e2ad8ce91210967f94655972841fbca7438d07fa28824ebc7d50daddd25c4fb99d6a697ddeb7725d955d8fd93547e6916e5348a3a4b74af182b96117477c22bd0a033bbced7ca5fdda17e245be36a9010b298a9a4420f6d7333975f88df5f23fcf149afb5c0f909f4a615e37bb0f8c2eb330f171bbd7eb174220efff687700977b0c5f5568546a25b5dc26e7e8615c426079b", 0xed, 0x2, 0x0, 0x0, r2}, &(0x7f0000001400)={0x0, 0x0, 0x0, 0x2, 0x1, r6, &(0x7f0000000400)="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", 0x1000, 0x7, 0x0, 0x2, 0xffffffffffffff9c}, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x8, 0x4, r5, &(0x7f0000001440)="cc4dd9dfb45bc76d9af3b595e7d4a4e1705a8aa61101c3484e40139857297be073e2156de4156b8ecc36bd41425cc4edec748b40e1071e7db22ea065b757de5b1231513ca9244b5777476f2a0c574cd3161bba8df5f56cb1d6c5a2fbf952a36de5cc8c1a3e77676a3b54c2708bf5a8c0f2d6a8162042cb099fb62a5db8080562b24de09fbab9ea17954de210c0b22a054c490cf162b88979aca516258ad32e6ac1a3e343135b9bbe5986713d6f81db7d54cfbfb0cd3357a6bd2d9e358e3c56dd5ad84aa62f0ab44a2722210cc3f8d61105e95b51d627f86f6991a842643aca8232bd40c987fc53abc60f8a4809", 0xed, 0x3, 0x0, 0x3}, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x9, r5, &(0x7f0000001580)="d42e0566a29685211a32843bf4eff95f502fe27e37d6576bff3f6f2c2662109e4d4eec0b49a1dadc2955bec1da2b16cd3261df8268db6f58068502d2", 0x3c, 0x9, 0x0, 0x1, r2}, &(0x7f0000001680)={0x0, 0x0, 0x0, 0x7, 0x0, r6, &(0x7f0000001600)="ba960ca3533ded8fc342cc845e99ba1f3c29f66e9a908b36d65395db43f0d2d0dd06e3d9e9c942dc6aa4ff0e6ffb56b215e281fdea6c5025e4205ccf56597ab363622673148f4faff2", 0x49, 0xfff, 0x0, 0x0, r0}]) dup3(r6, r5, 0x0) 18:10:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mice(&(0x7f00000001c0)='/dev/input/mice\x00', 0x0, 0x200800) ioctl$VIDIOC_S_EXT_CTRLS(r1, 0xc0205648, &(0x7f0000000280)={0xbd0000, 0x215571d5, 0x4, [], &(0x7f0000000240)={0x9b0961, 0x7ff, [], @string=&(0x7f0000000200)=0x86fc}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x44002, 0x0) mq_timedreceive(r2, &(0x7f0000000140)=""/65, 0x41, 0x38, &(0x7f0000000080)={0x0, 0x989680}) [ 1940.613532] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1940.667901] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:17 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x101000) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x80200, 0x0) ioctl$RTC_RD_TIME(r1, 0x80247009, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000140)={0xffffffffffffffff, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1940.881357] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:20 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000040)=0x981, 0x4) r4 = dup3(r3, r2, 0x0) ioctl$KVM_SET_ONE_REG(r4, 0x4010aeac, &(0x7f0000000000)={0x8000000, 0x2}) ioctl$KVM_SET_BOOT_CPU_ID(r4, 0xae78, &(0x7f0000000080)=0x1) ioctl$TIOCLINUX6(r4, 0x541c, &(0x7f0000000100)={0x6, 0x8000}) 18:10:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xd04, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) ioctl$UI_DEV_SETUP(r1, 0x405c5503, &(0x7f0000000140)={{0x0, 0x2, 0x9, 0xffffffffffff7fe3}, 'syz1\x00', 0x54}) 18:10:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1943.491566] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x4001, 0x0) 18:10:20 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='cpu.stat\x00', 0x0, 0x0) ioctl$VIDIOC_DBG_G_CHIP_INFO(r1, 0xc0c85666, &(0x7f0000000140)={{0x3, @name="b68b49029592b882f3368051deaf319b767702deea3e208678d6efe7421b43c4"}, "72b3be34e133c6d022c64e1003118fcbbec038d3bd2101dd7858c549b016c7f1", 0x1}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000240)=0x0) ptrace$setopts(0x4200, r5, 0x7ff, 0x100000) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000080), 0x4) fcntl$getownex(r0, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs$namespace(r6, &(0x7f0000000040)='ns/mnt\x00') dup3(r3, r2, 0x0) [ 1943.569257] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xe00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1943.746035] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:20 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x2, 0x2) ioctl$IMGETCOUNT(r1, 0x80044943, &(0x7f0000000080)) 18:10:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1943.917715] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x1, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup2(r0, r0) dup3(r3, r2, 0x0) 18:10:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:23 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:23 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:23 executing program 5: r0 = syz_open_dev$media(&(0x7f0000000000)='/dev/media#\x00', 0x6, 0x100) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000040)={0x0, 0x0, 0x1f, [0x0, 0x0, 0x1f000000]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f00000000c0)={0xfffffffffffffffd, 0xb9cc, 0x7ff}) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180)='TIPCv2\x00') sendmsg$TIPC_NL_SOCK_GET(r0, &(0x7f0000000300)={&(0x7f0000000140), 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0xdc, r1, 0x1, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_SOCK={0x8, 0x2, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x34, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x3}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2c95e8ae}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7e4}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xa1b}]}, @TIPC_NLA_MEDIA={0x80, 0x5, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3cc}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9543}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffffffffffffa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd0}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x100000001}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0xc, 0x9, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x101}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x1}, 0x8000) dup(r0) dup(r0) [ 1946.595038] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4800, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:23 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000b4508a)='/dev/ashmem\x00', 0x0, 0x0) open_by_handle_at(r1, &(0x7f0000000000)={0x8}, 0x0) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$DRM_IOCTL_INFO_BUFS(r3, 0xc0106418, &(0x7f0000000200)={0x101, 0x999b, 0x437d4d36, 0x8, 0x2, 0x8}) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f00000002c0)={{{@in=@broadcast, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@multicast2}}, &(0x7f00000001c0)=0xe8) mount$9p_rdma(&(0x7f0000000100)='127.0.0.1\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x800000, &(0x7f00000003c0)={'trans=rdma,', {'port', 0x3d, 0x4e23}, 0x2c, {[{@timeout={'timeout', 0x3d, 0xc3}}, {@common=@access_client='access=client'}, {@common=@access_uid={'access', 0x3d, r4}}, {@common=@nodevmap='nodevmap'}, {@common=@afid={'afid', 0x3d, 0x81}}, {@sq={'sq', 0x3d, 0xfff}}, {@common=@mmap='mmap'}], [{@dont_appraise='dont_appraise'}, {@obj_type={'obj_type', 0x3d, '/dev/uhid\x00'}}, {@hash='hash'}, {@dont_appraise='dont_appraise'}, {@obj_user={'obj_user', 0x3d, '/dev/uhid\x00'}}, {@fsmagic={'fsmagic', 0x3d, 0x7}}]}}) r5 = dup3(r3, r2, 0x0) ioctl$TCGETA(r5, 0x5405, &(0x7f0000000240)) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000000)=0x8, 0x4) syz_kvm_setup_cpu$x86(r5, r5, &(0x7f0000003000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f0000000040)="66ba410066ed0f060f20c035040000000f22c00f017a05f20f017a4adf447fb2b9e80000000f329a030000001a010f01bfc9dd0000c4c1fc1154a509", 0x3c}], 0x1, 0x29, &(0x7f0000000100), 0x0) 18:10:23 executing program 5: r0 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f0000000080)={0x2d, 0x4, 0x70}) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) 18:10:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1948.045450] device bridge_slave_1 left promiscuous mode [ 1948.050993] bridge0: port 2(bridge_slave_1) entered disabled state [ 1948.105795] device bridge_slave_0 left promiscuous mode [ 1948.111426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1948.279282] device hsr_slave_1 left promiscuous mode [ 1948.338249] device hsr_slave_0 left promiscuous mode [ 1948.398756] team0 (unregistering): Port device team_slave_1 removed [ 1948.415800] team0 (unregistering): Port device team_slave_0 removed [ 1948.426924] bond0 (unregistering): Releasing backup interface bond_slave_1 [ 1948.450446] bond0 (unregistering): Releasing backup interface bond_slave_0 [ 1948.546162] bond0 (unregistering): Released all slaves 18:10:26 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000340)='/dev/vcs\x00', 0x2000, 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0xffffffffffffffff, 0x4) ioctl$SNDRV_SEQ_IOCTL_SYSTEM_INFO(r0, 0xc0305302, &(0x7f0000000000)={0x1, 0x80000001, 0x8001, 0x7fff, 0x401, 0x9}) r1 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x80080000000001) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) readv(r1, &(0x7f00000014c0)=[{&(0x7f0000000040)=""/11, 0xb}, {&(0x7f0000000080)=""/31, 0x1f}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/1, 0x1}, {&(0x7f0000000380)=""/4096, 0x1000}, {&(0x7f0000000280)=""/70, 0x46}, {&(0x7f0000001380)=""/114, 0x72}, {&(0x7f0000001400)=""/152, 0x98}], 0x8) 18:10:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.controllers\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000040)={0x30000000}) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) 18:10:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:26 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4c00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:26 executing program 5: setxattr$trusted_overlay_redirect(&(0x7f0000000040)='./file0\x00', &(0x7f0000000080)='trusted.overlay.redirect\x00', &(0x7f0000000140)='./file0\x00', 0x8, 0x2) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:26 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm_plock\x00', 0x80000, 0x0) ioctl$SNDRV_TIMER_IOCTL_GINFO(r1, 0xc0f85403, &(0x7f0000000100)={{0xffffffffffffffff, 0x3, 0x4ecb, 0x2, 0x614b}, 0x8, 0x1, 'id1\x00', 'timer1\x00', 0x0, 0x7, 0xaa0, 0x100, 0x2}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000440)='/dev/uhid\x00', 0x802, 0x0) epoll_ctl$EPOLL_CTL_DEL(r1, 0x2, r0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) getrandom(&(0x7f00000002c0)=""/177, 0xb1, 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) 18:10:26 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x4000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x0, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1950.148657] IPVS: ftp: loaded support on port[0] = 21 [ 1950.361031] chnl_net:caif_netlink_parms(): no params data found [ 1950.428021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.435092] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.442830] device bridge_slave_0 entered promiscuous mode [ 1950.452712] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.463891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.479230] device bridge_slave_1 entered promiscuous mode [ 1950.523020] bond0: Enslaving bond_slave_0 as an active interface with an up link [ 1950.542995] bond0: Enslaving bond_slave_1 as an active interface with an up link [ 1950.587425] IPv6: ADDRCONF(NETDEV_UP): team_slave_0: link is not ready [ 1950.595193] team0: Port device team_slave_0 added [ 1950.601093] IPv6: ADDRCONF(NETDEV_UP): team_slave_1: link is not ready [ 1950.608799] team0: Port device team_slave_1 added [ 1950.614287] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_0: link is not ready [ 1950.621956] IPv6: ADDRCONF(NETDEV_UP): bridge_slave_1: link is not ready [ 1950.698211] device hsr_slave_0 entered promiscuous mode [ 1950.734935] device hsr_slave_1 entered promiscuous mode [ 1950.784712] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_0: link is not ready [ 1950.791804] IPv6: ADDRCONF(NETDEV_UP): hsr_slave_1: link is not ready [ 1950.811891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1950.818299] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1950.825033] bridge0: port 1(bridge_slave_0) entered blocking state [ 1950.831417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1950.885229] IPv6: ADDRCONF(NETDEV_UP): bond0: link is not ready [ 1950.891422] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1950.902708] IPv6: ADDRCONF(NETDEV_UP): veth0: link is not ready [ 1950.920111] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1950.929141] bridge0: port 1(bridge_slave_0) entered disabled state [ 1950.946948] bridge0: port 2(bridge_slave_1) entered disabled state [ 1950.955180] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1950.968289] IPv6: ADDRCONF(NETDEV_UP): team0: link is not ready [ 1950.974623] 8021q: adding VLAN 0 to HW filter on device team0 [ 1950.986049] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1950.994910] bridge0: port 1(bridge_slave_0) entered blocking state [ 1951.001312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1951.014961] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1951.022963] bridge0: port 2(bridge_slave_1) entered blocking state [ 1951.029408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1951.052305] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1951.061099] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1951.079900] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1951.088858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1951.102923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1951.115849] IPv6: ADDRCONF(NETDEV_UP): hsr0: link is not ready [ 1951.122026] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1951.130449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1951.153589] IPv6: ADDRCONF(NETDEV_UP): vxcan1: link is not ready [ 1951.166952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1951.213701] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x3, 0x9, 0xfffffffffffffff9}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000140)={0x7fff, 0x8, 0x1f, 'queue1\x00', 0x57}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setrlimit(0xe, &(0x7f0000000000)={0x5, 0x7}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r2, 0x80000) 18:10:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:29 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1952.717875] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:29 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000140)='/dev/udmabuf\x00', 0x2) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000040)='/dev/zero\x00', 0x501400, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x101100, 0xc4) ioctl$PERF_EVENT_IOC_SET_OUTPUT(r1, 0x2405, r2) 18:10:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:29 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) dup3(r2, r1, 0x0) 18:10:29 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6800, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:29 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_G_STD(r0, 0x80085617, &(0x7f0000000080)) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = syz_open_dev$radio(&(0x7f0000000140)='/dev/radio#\x00', 0x0, 0x2) ioctl$TCSETS(r2, 0x5402, &(0x7f0000000180)={0x5e1, 0x3, 0x100, 0x5, 0x1b, 0x6, 0x1000, 0xc0f, 0x14d8, 0xb7, 0x10000, 0x1}) [ 1953.022480] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1953.104545] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r2, 0x40082404, &(0x7f0000000000)=0x3f) dup3(r2, r1, 0x0) 18:10:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6c00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:32 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x40) r1 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000080), &(0x7f0000000140)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x10000, 0x4000000000000, [0x0, 0x0, 0x1f000000]}) 18:10:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, 0x0) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1955.795584] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7400, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:32 executing program 1: socketpair$unix(0x1, 0x82, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$dspn(&(0x7f0000000000)='/dev/dsp#\x00', 0x97d, 0x400800) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000040)={0x5000, 0x100000}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) 18:10:32 executing program 5: r0 = openat$vimc2(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/video2\x00', 0x2, 0x0) ioctl$VIDIOC_S_FREQUENCY(r0, 0x402c5639, &(0x7f0000000280)={0x9, 0x10002, 0x5}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000140)='/dev/dlm-control\x00', 0x2, 0x0) ioctl$sock_inet_tcp_SIOCINQ(r2, 0x541b, &(0x7f0000000180)) fsetxattr$trusted_overlay_opaque(r1, &(0x7f0000000040)='trusted.overlay.opaque\x00', &(0x7f0000000080)='y\x00', 0x2, 0x3) socket$rxrpc(0x21, 0x2, 0x2) ioctl$sock_SIOCGIFCONF(r2, 0x8912, &(0x7f0000000200)=@req={0x28, &(0x7f00000001c0)={'veth0_to_team\x00', @ifru_flags=0x1000}}) 18:10:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:32 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$PERF_EVENT_IOC_MODIFY_ATTRIBUTES(r1, 0x4008240b, &(0x7f0000000040)={0x3, 0x70, 0x8, 0x9, 0x200000000000000, 0xff, 0x0, 0x8, 0xb8, 0x2, 0x4, 0x80000001, 0xffffffffffff7fff, 0x4e65, 0x7, 0x6, 0x8, 0x9, 0xffffffff, 0x6, 0x0, 0x5, 0x8, 0x0, 0x4, 0x4, 0x3f, 0x7, 0x0, 0x4, 0x0, 0x4, 0xfffffffffffffffe, 0x10000000000, 0x7, 0x0, 0xd2d2, 0x4, 0x0, 0x20, 0x6, @perf_config_ext={0x1f, 0x6}, 0x40, 0x8, 0x65, 0x7, 0xd1d4, 0x5, 0xfc}) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup3(r3, r2, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000100)={0x7, 0x0, 0x0, 0x4}) ioctl$DRM_IOCTL_SG_ALLOC(r1, 0xc0106438, &(0x7f0000000140)={0x7fffffff, r5}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r4, 0x28, &(0x7f0000000180)}, 0x10) 18:10:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1956.083723] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:35 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:35 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7a00, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/policy\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r3, 0x84, 0x8, &(0x7f0000000040)=0x4, 0x4) dup3(r2, r1, 0x0) [ 1958.885854] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:35 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r10 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0x40a85321, &(0x7f0000000500)={0x0, 0x0, 0x3, [0x0, 0x0, 0x1f000000]}) 18:10:35 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)) io_submit(0x0, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:35 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r1, 0x4) [ 1959.090818] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x34000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1959.312797] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) 18:10:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) lstat(&(0x7f0000000740)='./file0\x00', &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0}) syz_mount_image$erofs(&(0x7f0000000040)='erofs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0xa, &(0x7f0000000640)=[{&(0x7f0000000140)="11fcceaf525cd888bf21a4033e7e2eb03c91ad", 0x13, 0x5}, {&(0x7f0000000180)="a0e5242cab0450672b1f8cef344456bde34b4b9e233aa4a7b534859cf5a7bed548e44290732a1c701aaff205b503cdf4c941b019684a4711d611b363a5ceb1ffc76fa448ac808d04265c7491b79d045d2e2db690c0b0a28414a4c20178c740be05c393222681770779c22e6ea7644384651707320363fcce8eb559ea10998117dabe07ac942399a16b8d02a22e82", 0x8e, 0x6}, {&(0x7f0000000240)="b80edb97345b6d1511178a7d303726084c12dc6f369ba3e7", 0x18, 0x10000}, {&(0x7f0000000280)="5be7e13047558e6535da83fa2958e3bb1157596f0c0c6eeaf345618d7da32bf04a54721105e0ff51c3f6272968063909bfa50357a3d75116d37668fcb140671008f6b0bbea980a2a04aed14550235031d05aaece57182c19025fce1eafc052f18d89f7c98addd327adbcacbaf7fd7484c749c35b084d00f6765193db2e13fec99c4c806b60390994941f044afd23dd5cb6315e12d9521ec5edb3ba9fc56eb06e23a3c2f0e4092cba423c6b462e593fcf80d7022ee02fc3845ad3f3d7fbb8b2ec6b341ee31086070003144ccbbb287e896c0da9b6eb8c3bda2af583bc9b848dd683cbd4fca7134a9b424c0b18e1135207a40757a067fa3551c1", 0xf9, 0x7}, {&(0x7f0000000380)="26a46db31ca33167cc6687859bcd95f49fdce66cc27282bb5b35f17d5cd44e15cbc13abd034d57a3375f6ddbd902cd5176557c37a7b243dec4393e63aaefb7c0917825f9ef0c89eeb4a674531e441cbc8e", 0x51}, {&(0x7f0000000400)="c3e6c40cda2252bb88be77506770edb5e6c027d7eb0e9952ba2019f346b8e299c295c0a4e5ee62a81ce1044af3dfbcbaea359858b6f7270fc56afcd3c739c1", 0x3f, 0x5}, {&(0x7f0000000440)="d41aed640d2c969cf789548e98dfcb717200d54ec24edf184d82782687b7e55194e477350c88cad6d68159a3", 0x2c, 0x8}, {&(0x7f0000000480)="85e410e8c689d4f5cd56fde42372c59a431f5c19915becd9f265280547041bdba927488d5fb14ef87179c2a9a1c3f48cb9ac1aa1e0c1760fc79dd8fbea3ce7599f679b22c30874eb317d8fb89f3192c22d913f56d20b03d335f3f92a", 0x5c, 0x9}, {&(0x7f0000000500)="6031d01f8726aec3bbf2badb2d0d8ad8a5bdc35b6942697589b33cc99c00afc19cd6a28559365875cceb3e78a370ece230f18f291946e0ed65bedd6412", 0x3d, 0x9}, {&(0x7f0000000540)="fa474ea57a17ffe4a72d321fd34609a590e9bf28aa1ef7224d1f38a82245f58f3052324a981d082f067625e66bd263c677887e7366195da4759c326444c2b5f9e923ad48a01e62ff8acc184d2cb340fa3e25e17fb459d55c2d3a9014d6cbcc4dd3ed7fe64a66387f1bddf1454af15b1ef3f9175321c27f28f7f956f8ae3757499f94912a96b5b528be9d990c51b91af48b64b8a81be97143cc8fe78c4964651c49039e9990add6a71c7883772229c40b8938fd38b736289ea06be37dcc91ac36f957f18f7db7c67bb38b33f751abcd136b923f90d70dfa5fe384adf2d2da0e8535", 0xe1, 0x7ff}], 0x10c20, &(0x7f0000000800)={[{@nouser_xattr='nouser_xattr'}, {@fault_injection={'fault_injection', 0x3d, 0x401}}, {@fault_injection={'fault_injection', 0x3d, 0x4}}, {@acl='acl'}, {@noacl='noacl'}, {@noacl='noacl'}, {@acl='acl'}, {@user_xattr='user_xattr'}, {@user_xattr='user_xattr'}], [{@obj_role={'obj_role'}}, {@func={'func', 0x3d, 'PATH_CHECK'}}, {@subj_user={'subj_user', 0x3d, '/dev/snd/seq\x00'}}, {@euid_gt={'euid>', r1}}, {@subj_role={'subj_role', 0x3d, '/dev/snd/seq\x00'}}, {@permit_directio='permit_directio'}, {@obj_type={'obj_type', 0x3d, '/dev/snd/seq\x00'}}, {@smackfsdef={'smackfsdef', 0x3d, '/dev/snd/seq\x00'}}]}) 18:10:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fallocate(r2, 0x10, 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x400300, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1961.983635] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) 18:10:38 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000140)='/dev/uhid\x00', 0x802, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x3, 0x80) ioctl$EVIOCGUNIQ(r3, 0x80404508, &(0x7f0000000180)=""/228) r4 = dup3(r2, r1, 0x0) ioctl$EVIOCGUNIQ(r4, 0x80404508, &(0x7f0000000000)=""/64) 18:10:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8000a0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:38 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x1000000008000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$sndpcmp(&(0x7f0000000740)='/dev/snd/pcmC#D#p\x00', 0x9, 0x252000) ioctl$PPPIOCSMRU(r1, 0x40047452, &(0x7f0000000780)=0x3) [ 1962.182185] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8001a0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1962.392723] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dsp\x00', 0x101080, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) ioctl$TIOCGWINSZ(r0, 0x5413, &(0x7f0000000040)) 18:10:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0xfffffffffffffffe) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:41 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, 0x0) 18:10:41 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0ffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1965.058234] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:41 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000100)) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000)='/dev/uhid\x00', 0x2, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) 18:10:41 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f00000001c0)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_persist_mode\x00', 0x2, 0x0) open(&(0x7f0000000180)='./file0\x00', 0x200, 0x140) accept4$rose(r1, &(0x7f0000000080)=@short={0xb, @dev, @remote, 0x1, @null}, &(0x7f0000000140)=0x1c, 0x800) 18:10:41 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x1000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:41 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 18:10:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1965.419474] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:44 executing program 5: mknod(&(0x7f0000000140)='./file0\x00', 0x280, 0x96d) r0 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000040)='/dev/snapshot\x00', 0x2, 0x0) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000180)={0x3c, @local, 0x4e22, 0x4, 'nq\x00', 0x10, 0x3f, 0x6d}, 0x2c) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:44 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BLKRAGET(r0, 0x1263, &(0x7f0000000000)) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x3fffffffffffffc, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$selinux_member(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/member\x00', 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:44 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 18:10:44 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup2(r0, r0) ioctl$UI_SET_PHYS(r2, 0x4008556c, &(0x7f0000000000)='syz0\x00') r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r3, 0x0) setsockopt$inet_sctp_SCTP_INITMSG(r2, 0x84, 0x2, &(0x7f0000000040)={0x4, 0x3c0f, 0x458, 0x7ff}, 0x8) [ 1968.154948] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:44 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:44 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) geteuid() r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x200, 0x0) ioctl$KVM_GET_CLOCK(r1, 0x8030ae7c, &(0x7f0000000140)) setsockopt$inet_sctp_SCTP_DISABLE_FRAGMENTS(r1, 0x84, 0x8, &(0x7f0000000080)=0xdaaa, 0x4) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:44 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x3000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:44 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x0, &(0x7f0000000540)) 18:10:45 executing program 1: r0 = syz_open_dev$vcsn(&(0x7f0000000240)='/dev/vcs#\x00', 0x5, 0x403) setsockopt$inet6_MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x4e23, 0x2, @empty}, {0xa, 0x4e24, 0x6, @ipv4={[], [], @loopback}, 0x4e}, 0x0, [0x100, 0x8, 0x1, 0x5, 0x2, 0x40, 0x2, 0x3ff]}, 0x5c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) fgetxattr(r3, &(0x7f0000000080)=@random={'trusted.', '\x00'}, &(0x7f0000000180)=""/186, 0xba) syz_open_dev$ndb(&(0x7f0000000000)='/dev/nbd#\x00', 0x0, 0x701000) [ 1968.423569] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:47 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:47 executing program 5: socket$pptp(0x18, 0x1, 0x2) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x200000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f0000000240)={'syz', 0x0}, &(0x7f0000000280)="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", 0xfb, 0xfffffffffffffffd) r2 = add_key$keyring(&(0x7f00000003c0)='keyring\x00', &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, r1) r3 = creat(&(0x7f0000000040)='./file0\x00', 0xac) ioctl$SNDRV_CTL_IOCTL_TLV_WRITE(r3, 0xc008551b, &(0x7f0000000080)={0x2000000000, 0x14, [0x8, 0x1ff, 0x5509, 0x8, 0x9]}) keyctl$read(0xb, r2, &(0x7f0000000140)=""/160, 0xa0) 18:10:47 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:47 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 18:10:47 executing program 1: ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r0 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vsock\x00', 0x30000, 0x0) 18:10:47 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = dup3(r4, r2, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000480)={0xffffffffffffffff, r3, 0x0, 0x1e, &(0x7f0000000240)='/selinux/commit_pending_bools\x00', 0xffffffffffffffff}, 0x30) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@loopback, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@local}}, &(0x7f00000005c0)=0xe8) fstat(r4, &(0x7f0000000d80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000680)=0x0) mount$bpf(0x0, &(0x7f0000000f00)='./file0\x00', &(0x7f0000000f40)='bpf\x00', 0x1090020, &(0x7f0000000e00)={[{@mode={'mode', 0x3d, 0xd6}}], [{@fsuuid={'fsuuid', 0x3d, {[0x0, 0x36, 0x34, 0x33, 0x7b, 0x62, 0x0, 0x34], 0x2d, [0x64, 0x31, 0x77, 0x73], 0x2d, [0x31, 0x3a, 0x77, 0x39], 0x2d, [0x77, 0x39, 0x3b, 0x77], 0x2d, [0x72, 0x62, 0x34, 0x38, 0x65, 0x66, 0x30, 0x7b]}}}]}) lstat(&(0x7f00000006c0)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000000780)='./file0\x00', &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000840)={0x0}, &(0x7f0000000880)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000008c0)={{{@in=@multicast1, @in6=@ipv4={[], [], @empty}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@initdev}, 0x0, @in=@dev}}, &(0x7f00000009c0)=0xe8) r14 = getegid() r15 = getpgid(0x0) lstat(&(0x7f0000000a00)='./file0\x00', &(0x7f0000000a40)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000000ac0)='./file0\x00', &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpid() stat(&(0x7f0000000b80)='./file0\x00', &(0x7f0000000bc0)={0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000c40)={0x0, 0x0, 0x0}, &(0x7f0000000c80)=0xc) r21 = getpgrp(0x0) getresuid(&(0x7f0000000cc0)=0x0, &(0x7f0000000d00), &(0x7f0000000d40)) r23 = getegid() sendmsg$unix(r5, &(0x7f0000000ec0)={&(0x7f0000000040)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000000200)=[{&(0x7f0000000100)="761337774e8a90828e86d5ff923c538206b438dbf36842a5ab040dd942f52c4d618c040c635861980359e4598f023e681862203a929965640fc9c97983c33a29edd164c0de3b332aa2a09ef43a0dfc9089ed89ec2039af", 0x57}, {&(0x7f0000000180)="b3b96b78d949298897efaa983d218a6149acdb28cad37f7da910a9b1fa0b0c45e3ffde4dfd50c17ff3bb52a765e742787ae5dfaff51aec72aa04baff880681bb481374b57c05", 0x46}, {&(0x7f00000002c0)="b28db4f17f35da1a9b62a4a965e60a36d5f8f740303bdd3348c1fe7980388f7c4e2337f1ae1313695644c3630a15a111c7a97af58370ce6491db44117b1f6f23871d5abdbdb4e438a18af492a30a80273ceb1f1ef17403880490c29c9c5fb95b1d3719406d36b4cd1bb2e53034a8ff22f5c9273cc0558eb21188cbdc4e53342e69044d854ce1247fdf72724d96ef3c3150bc5f52c8157029f20a851ff410f7669dae2ba3861b8f5952ae963ac478ce49adcdbadcbce254512b7c86b18fdf82c2316a59d8dd261e60c14955c45659f66af8c9edfb91e3bae543c3708d9945c20cf120911f2e00fee8d76c90852e204a19", 0xf0}, {&(0x7f00000003c0)="07ec8b169455ce752bedd388d23a0a9767bce3cd3e67f063516f977977c2b3a8ff1c9b055889975d27e8745ab9a091cff046ba47e6fa267226db54f832d1c04006875fecc7e819ea8d319db90eee6f28f0de322903d45e48dc2b84265e151ebd15e33a590a652f40781622fb439129b8098c00c65e0c8230046dba2d9711b73009c269f39648c0", 0x87}], 0x4, &(0x7f0000001100)=ANY=[@ANYBLOB="20000000000000000100000002000000", @ANYRES32=r6, @ANYRES32=r7, @ANYRES32=r8, @ANYBLOB="000000002000000000c000000100000002000000", @ANYRES32=r9, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r3, @ANYRES32=r0, @ANYRES32=r3, @ANYRES32=r0, @ANYBLOB="00000000180000000000000001000000f9a40fc0751f9301000000", @ANYRES32=r0, @ANYRES32=r3, @ANYBLOB="20000000000000000100000002000000", @ANYRES32=r12, @ANYRES32=r13, @ANYRES32=r14, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r15, @ANYRES32=r16, @ANYRES32=r17, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r18, @ANYRES32=r19, @ANYRES32=r20, @ANYBLOB="000000002ea3f39c6f14ba1efa65f6e99e6203100000000000000001000000010000002000000000d692ebbd511c2602d56b31", @ANYRES32=r21, @ANYRES32=r22, @ANYRES32=r23, @ANYBLOB='\x00\x00\x00\x00'], 0x110, 0x40400c0}, 0x4000000) 18:10:47 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1971.248174] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:48 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 18:10:48 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x3, 0xa8000) ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(r1, 0xc0905664, &(0x7f00000001c0)={0xa74fbea58cc42c46, 0x0, [], @bt={0x7, 0x8, 0xf8f8, 0xfff, 0xc2, 0x5c, 0x10, 0x5}}) accept4(r1, &(0x7f0000000140)=@generic, &(0x7f0000000080)=0x80, 0x80800) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:48 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x5000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1971.540473] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:50 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:50 executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000880)="0adc1f023c123f3188a070") r1 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r1, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r1, 0x9) r2 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r2, &(0x7f0000419000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/\x00~WM\x00\x030\x80\x90\"\xcf\xde&U]\xc9\xec\xfe\x19t@n\xda\xd3\x83dx-c\xb6a(T\xb9\xe4\x9d\xbd\xca\xefq\x81\x97\xe3~\x87\n0\x8b\x1e:y\x8f\xa7\x88\xa4m0%\xef\x93>Q\x82\x8a\xb6u\x06N*\xdb\xe9\x12d#\xb4\xa7=h\xfb\xe9\x9cm\xb2\xf1`\xd4\x9c\xb6\xcc\xe7l\'(\x9aO\x9d\tsT\xaa\xa5\x86\r#\x83\xdf\x87Rk\xaa\x18M\x90\xbbw)6l\x17\xbc3\xd7e\xe9\xbc/\x88*\x13\xf3\xa9\xc1\xf6\x06`\xbdO\xd2\xfa1\xd2\xc0\xa7u$\"\x89\xbc\xe0b\xd1\r$\xde\xd5@i\x18\xa6k,u\xc4?\xe1\xffE\x8a\xe5\xcd\x9f\xecc\x03\x9b\xa5\xa7\xb6j`\xed\xe5\xcc\xda\xbc~\xe7v`\xef#X\xcc\xdf\xf0\"&\x02\x13\x84\xb0\xc25\xf1\x14\xed\x9a\xde\x92vz\xec\xc2V\xac\xde\xb6\x10\xdfB\xe7\x16\x9f$\x03W\xf75\xae_\xe2\x90\x17\xe5\x1e\'%/H\xb9[\xfb\xbb:\x86U5)\x8b\xdc6\xd7\x1d\xb65\xf4\x1cWw\x1d\xb7z\xea\xff\x88?\xeb=\xc3\xcc$\xbd<\x03n9j\xd3\xaf7\x94PX\x83\x9e\x81\"p\xbc@\x90\x1f\xa6T\xe7\xcc2\x92\xa8/\xc8\f7M\xc0qB\xa1\xc2\xe9\xd3\xe2R\x8eO\xda\xc3+\xca\xef\xe9\x10\xeb\xd3\xb9H\xa3\xbf\xeb\xef_\xa8\xd8$s\xc7\xfb\xf3\xec', 0x0, 0x0) getdents(r3, &(0x7f0000000280)=""/135, 0x74f) perf_event_open(&(0x7f0000000440)={0x0, 0x70, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x843, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34dc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0xd, 0xffffffffffffffff, 0x0) syz_open_dev$loop(&(0x7f0000ca9ff5)='/dev/loop#\x00', 0x0, 0x105082) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) socket$inet6(0xa, 0x803, 0x0) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) r5 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rfkill\x00', 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000580)='IPVS\x00') sendmsg$IPVS_CMD_ZERO(r5, &(0x7f0000001740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x10004080}, 0xc, &(0x7f00000006c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="000326bd7004fbdbdf25100000000c0002000800070000000000080006000000000008000600ffffffff0800"], 0x1}, 0x1, 0x0, 0x0, 0x8000}, 0x4000005) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x78, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(0xffffffffffffffff, 0x40106614, 0x0) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(0xffffffffffffff9c, 0xc00c642e, 0x0) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, 0x0) ioctl$DRM_IOCTL_SG_ALLOC(0xffffffffffffffff, 0xc0106438, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x0, "a77760f5a7645bc43c241d69912dda0c63c2a66726f8cfafd6c8fe2c98de7ba44947a79015f0fe57917cb62a93987a938fdedfce7bbba4fec2d8a09c41fb233245f2604b9e07b8ab79ec15ef2818a179"}, 0xd8) bind$inet(r4, &(0x7f0000000180)={0x2, 0x4e23, @dev}, 0x10) connect$inet(r4, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) ioctl$PIO_FONT(0xffffffffffffffff, 0x4b61, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='lp\x00', 0x3) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) pipe(&(0x7f0000000380)) 18:10:50 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:50 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[0x0]) 18:10:50 executing program 5: r0 = syz_open_dev$admmidi(&(0x7f0000000000)='/dev/admmidi#\x00', 0x80000001, 0x80400) ioctl(r0, 0xf85, &(0x7f0000000140)="1df8e19ce6848c76e577234211c2aa8465a04910b003c8790c9929479279b68c8fae41ca6fb09acc63723dcd2d6c03677ca9aa93e2da585479a1f6a866204ad4bf094f58cca2bbf0a7dad1c8ab955fb5eaafdc63a7b24b44f89392ca92e6d2529f614dd497bea1decdd7a2922428a36db1e14364725e30bb0d") r1 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x0) kexec_load(0x96a, 0x5, &(0x7f0000001400)=[{&(0x7f00000001c0)="b87bda326043334e253df1c140deef24d9a69b3d2e0c4c20d73061cf7a976cb543ae0bd517130e4e33d72a2476b158b3547bbcb0deb2a033c114d0e552ead7077bf5aa573ebdf316f97e92c9042809bcd1e95fcaa3cd6adc37ce9c7ebe", 0x5d, 0x2, 0x9}, {&(0x7f0000000080)="5b99127f76c208d26085e7c881d3079d6948c7", 0x13, 0xa3d, 0x8}, {&(0x7f0000000240)="aca1fc1367d7f85ebb45b367ee787f363bebfdacd585d732adbdecf354f140b4330575d495d1fae5fac44017a940565dc06d058d32e0cc6d55f40eff5c99a25760f917a1ad1e66f528227c7b81be5700b231bb7428b2ee9956e31048f99feafc7f195da7eaaef07e405288849fb56adfda88aa3cd02bffcc1875c958f1779b36956777952548d43ff8578bf338081266d05ffbb111923ca52286932053596a17e879b75e91bd8b1859d01e004f20d30437e9c26a51387952e0d364dd9231a9ccb7856c41446060489c36a7b72f48661507ce3d6284265c64", 0xd8, 0x8, 0x6}, {&(0x7f0000000340)="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", 0x1000, 0x2, 0x401}, {&(0x7f0000001340)="aaf2c9f0d048f72340f66da34280c7aa177638197a363aadaa57689946f78c0b4e032460eaaa21ef25edd49fe829a700d1b1cbc63e2e5a5969a622c5f1c1e3d605cd68805a7bcf46dd301a0e730fbf157ecf355d3a943d639a257da27768b580fc83b55112c0f794a16fe2baaa7e1be94779effda1f2be3a3fa4d389e94c314d2d9e4e7f45b33997f72924e2717668ee", 0x90, 0x81, 0x9}], 0x280000) ioctl$TUNGETFEATURES(r0, 0x800454cf, &(0x7f00000014c0)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:50 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1974.303270] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1974.311939] audit: type=1400 audit(1548094250.957:73): avc: denied { name_bind } for pid=13263 comm="syz-executor1" src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 18:10:51 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f0000000140)={0xfffffffffffbfffe, 0x0, 0xffffffffffef0001, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000000c0)='/selinux/commit_pending_bools\x00', 0x1, 0x0) r2 = syz_open_dev$usbmon(&(0x7f0000000100)='/dev/usbmon#\x00', 0x1, 0x2000) ioctl$DRM_IOCTL_AGP_ALLOC(r0, 0xc0206434, &(0x7f00000001c0)={0x5, 0x0, 0x1, 0x8}) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000200)={0x3, r3, 0x1, 0x7bc}) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r1, 0x111, 0x5, 0x7696e282, 0x4) r4 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x10000, 0x20000) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000001200)={0x0, 0x0}, &(0x7f0000001240)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001340)={{{@in6=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@local}}, &(0x7f0000001440)=0xe8) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f00000017c0)=0x0) lstat(&(0x7f0000001800)='./file0\x00', &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, 0x0}) fstat(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getpgid(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000001940)={{{@in=@remote, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast2}}, &(0x7f0000001a40)=0xe8) r12 = getegid() sendmsg$netlink(r2, &(0x7f0000001b40)={&(0x7f0000000240)=@kern={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001740)=[{&(0x7f0000000280)={0x730, 0x2d, 0x0, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x14, 0x3b, @ipv6=@mcast2}, @nested={0x53c, 0x4a, [@generic="e5f6d593251da048868f2c28876abbb13f496a1a3f0d33dc5c95e24cb925788efe1f5c67c96eceec0ccf7a50e9cdca868019663ed6c9e27d5d88b720c3e81d19aa3874d4a1a0df1053124131329cc999ba3b835c317c8f2b49739b587d89a1286e0bc5d0cde5810df341a6c119efdcda52d36dcf3e5b0e73fa6a6f90b32fb49344365acc95bf2bccff3a228ac977487f14ffc2beed06", @generic="cd2a2fef53f620540d9c1ac78159ffd07a024d0e24b03fbe6285ac0d84e9b2276f99bcac29f429925b94fb4e648ed6d43da7d165ed2f1afe133e802583d58d059d377f9b0f240ec2082c168d0ead00b5ecb9e9655ab549175a67585cf34365ac6d1158a75c40893c1fddc709c4b40e7197bf4179493bc3661a53102862813a6e0431a4913cebb835f59b7dda36a2d44c3f4f8ccbd40ebf07ee1dfe5988a90d91df58649c1a1af824cf", @generic="1060daa7826b29972bd79d268b85f9dd4216bdfe28c234880ad88b73dea57bf39f3db1c1b98d25899a2d081c1eeb190f4582b0c77652e09f6fecc4475a3b7d86e10d04518f1dcb79bf0e8ce0df854f82658282d8f3a044ef6dd1f16ddf8c96553c028884c15b377936125d9627df6071e882607563cc6d229a1db5ae7aae576037d9b0739b5ebd9f067b082f53f450910c476b400fdf7c6c6010c47adc5f123c42e7034fe48df144c2073eca8558a5aa33c0b22392a75f47a28b6a2e020b0992402476a9dec616bc25fcd32d67254a329fa28413007ce5c67cd016e86c099d370b10b5d8a7a8b5bd52fccf8461d8883ab6", @generic="4e7b0241433b9e60211bb6e8568ef45af8c5d2ce208ad155915d8d192250dd8b74ebf54fdbc2bd93fb1fab177e8a9c4d2b504a9e43bc18d5def9e488267c9946a306474b02282c287985b487de318e7f42c63bad6af56dddad991147695e6a8d09b0e1b497d8b8c455b327f06175d6951a25d3e1b8078c2cf03cbe13e4684bfb1f1ad8c01b5e80695cf8ad46f2f576a21b24e65cfe746f891c4aecb36faad41be32c12ed5499c03f8a208910bdd947a6639aa8f3b5e025c43c9a4c19f06391d17a147c443be35b4c67a020260433902d25e0b584f8e249ccb4af188d7bf34be5439a733fb04e8f2fc26274afc176", @generic="d1e2d3f697cf2926ed2e200d991552102644c4e160bed8b1776597e8b6b4a7a838e05df68d53f9c77977aa2bbb3a626c516c2f0eaac6f032586651ce31c2744bb6653f8a9f29d8e70b470e98b8f8a17fcfe2868afbf10d705bd41a2afbc8d89530d11b59c2301a4677df3d30ecc36ed8a66356c8631a3c76598a21a74305ecf932470d8b34fe444a4e9169061f74fe574eadddb9437b6bd16c2f5e509529048945a473ed247b9f547607f2c9a3bdecf4fcc45549c2bbcac49ad0cd", @generic="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", @generic="22ffb330a92f4ab6a06963d5e1392c2a0106141a623eaab4a4d053ecca056468d4cc601989411c51d23e410fe5d4f16774076d0571a811d802d67ad90f05fd1f07c418dfef00c41237ad0e68bf7ffb3c474a1457ee8e13", @typed={0xc, 0x1a, @u64=0xffffffffffffffff}]}, @typed={0x20, 0x63, @binary="d499e2640d5c46a6eb276c93e4507c27cce8c80026048d7866"}, @generic="051d5f87ac1a87a8b39bc3bee1bb109b908a2d4c7d6a14ff94d404737adfc9ad8310a551ed34a0a1c68ff96e95413131ca4b8f7e41cd8c924f34f668a3aaf1eacbaea68bf20587b20da0d9832fa789eb04005540df35f91a303e2e0bc2f820b006ab04fdc8ed45ec6f312977ec8cdf89b5", @generic="52a3c371fddcecea68cc35926c05462ed2e7c6faa61787729265f316c2edf7", @generic="17fa385b27ee72a9f9ee1ee456d124d8672c1a0ef7438597bda3aa716d36691b6cfd4c11785fcc8d77564c82cbd8a8ba0c", @generic="3439c380dcfb47df3680f3f8a07ff8bb29ea6f8e1bbde2a69cb6f00c7a19c2aa5ef099710fd120355f6e92bbeb0f159b0f9d3e65aa995cf658268c75ddc19328542f26f7f7aa7d156ec6b21302cba9ed157e775f9e34af830b247934f1b537d317e82e8b8a52e6ac81ad62d62e7fa33197c58ec0856287ede4e7191b13db9bcfb8dfc95f00f5bbd667752d571eaf361b32066407d59f698f07499323f8eb4bad203eab498e02354afe234b598d9020fc65acd16cdfc4824bc2ea053cba170a6ff243e28b1d6b8fcc3b115319a3f9a41b9b670b4b118d1a349b6a0d4dac", @typed={0x10, 0x29, @str='@procuser\x00'}]}, 0x730}, {&(0x7f00000009c0)={0x114, 0x2a, 0x2, 0x70bd2b, 0x25dfdbfe, "", [@nested={0x104, 0x72, [@generic="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"]}]}, 0x114}, {&(0x7f0000000b00)={0x3fc, 0x30, 0x38, 0x70bd2c, 0x25dfdbff, "", [@generic="8f7213ff105ac34f3c746c4204106a8de610aeed9789a73e44a410528ffbd3d6bced991d58ebe549bd88", @nested={0x21c, 0x3e, [@typed={0x14, 0x76, @ipv6=@loopback}, @typed={0x58, 0x6e, @binary="50d7ea8716e89695b0600c2aa026ada3b06233576d1509a24e1b81e110279280a9be6178517360a952e936ba55b9a45c5b60d7384f26a7c7ddbe9487fdc2856b9e84b6dff9bb73652597f4f9e420ca6d6ad904"}, @generic="eec931bf81ab8584358a02cccc8404d2e435a0a595b8089e98f3b28a4e56728a7e5a21f5070bcd15c54b9ee34ea34f57fdb9aaf21d15c456a5fbc25646feaaabff1a3bbcdcb8cc547af0697c721be8eaf66f94e0c933bfe441b1d9f28eb881a821f4e601464bf461513dbffae9bca51004216afa8b975cba56b9d3ed22a2602a3189f7d3102e756eca12bc65e056ac50835d2a14feab687e605713b2cb1f20fe1684d8f7f37fa8e94bb9995ea8d896cc5d53610110d87c5ed48b68d71c0bfc5624bb081b5c62703460a344348b4c98cbba10b48cb0ebe40a86a8a3413a8a73c1db028b251e9d1ea209b65bbe27132afd0077f01683", @typed={0x8, 0xa, @str='\x00'}, @generic="a5c9c63c044d922023f29ac5f3dc4c1d953b398407d6fba6df4679754a5f36811a6cb0c226b302abe973e781906dfb90f363b910186ab94e489152f5a7c9bdbd21cc5626af47c32edbec7e21e835711509d0a7202c8ae81b3d2a7d210bfe035643d3c74c1edff1b8cfa7d994ccfdcf830283afdf3826b778d5da9a39ab7b95b9a58340713d0d8eb642840fd6212a9e4c4c066c332be970427f3b8eca2f8bf3c695402a6e9867d5fd379db801"]}, @generic="75c3582fdb3ea3c4ee1aeb96dcb716b03d8445be62e5f6f6be2cbaeaeead6346600072c2c45b771af178e6b624a6f5fd4a394d8784dd7aefc3264289ef254a09ae4310fc091b72b81188c02d7cfb7e77bedbfb00954d99310e7121628abf3e24544dcc7769ed6681ea8e39fc3c140e5e2e2dbdcdba2ec63874f753a723c73396f1d7d3110d1d868a3afa0f1baf5e4e01838eb6e924ae9d2098470404b81a3fbdb6a14197c490884ca3d0d0da4752a7b61d9a8e063122f8566c200f0fb3c1b193bc5fe16cbaffa82e482a5a2534b5c105db511848fa7e1c74", @typed={0x8, 0x38, @u32=0x56d}, @typed={0xc, 0x85, @u64=0x2d}, @nested={0xb8, 0x17, [@generic="7a81dc488af68d7edfbeade7941e236a24aa6d9b388d81932bf0b846b2a2489a3e9c7835d218991f57ec73e6817475d56f3dd481c157719dc96a144ebaf4a9b2b7adde9890450ee424580dc71c3e89572c5cb5a3791b90a8551e81ddfc8e503a3ad08cfe24b53d0bc8461e92db9a86c5812d1aae22f2ce8359f30cf1a1bf49123743765d6f", @typed={0x24, 0x93, @str='/selinux/commit_pending_bools\x00'}, @typed={0x8, 0x25, @str='\x00'}]}]}, 0x3fc}, {&(0x7f0000000f00)={0xb4, 0x38, 0x3, 0x70bd27, 0x25dfdbfe, "", [@typed={0x8, 0x13, @u32}, @generic="855913f833ae290fa3926d015417bb12dbb6a2b152f83e0b286164376abdec1a237f1da15bba76d322d882f7c23079de0f6b5f83f31127bfc1ade785c39ab6a78b3dfc636797fa4cc6a0bc3a43c63558738babb71821a71904e29352b1635c2e649b33db6b47cbdab0d986c3885a1d2f2e0d9d85cdc07b42a368bef103d7ac2c949a9f418089eadd2646466d8d7dab9c26ebe59f9201e18708"]}, 0xb4}, {&(0x7f0000000fc0)={0x21c, 0x22, 0x10, 0x70bd2a, 0x25dfdbfd, "", [@typed={0x14, 0x96, @str='/dev/snd/seq\x00'}, @generic="ebf89699bb21f14c32270570a853f4b89b95430b83f83b20ed365f93740b111733ade7526600459d456a7bc7c8d220f5983830f7d16c02930e37a892a7abdd82cdf20a278e41d3409297895abd4d8da9e90a823a1cc119f83c4e26d6c13a04a335e0ae272fd7fe85d0b2c1f1d23dbedb58fcfc0d97b361ce9a93015326621316a18e9f2df1e3a53ef2e3a9c55a4cee9020c6796706c548ea826d205b8d294cb0926a39f01383ff07ae799134824939cd85e844f415e46cda50e949a05a40eca4dce661fc9f41101b7d2d40de2bf3abf46906036cba6ed13dfa0c5c6a4a0d8004c3fc268cf4a3d3e6e9fb606cf678", @generic="d4523272d2889a8e023ae4699d75f64f110b365cc74ae93ab1341f4ecc53f5989eb0447853b1375b164c5d7e70703241f2c29fc1267256b1958c7d145207a0686ee8b8de6425fadb5133c1e55badbb7c5eba5d127f8ef46191909b9f984c9ccbdf294d9decb1d4037950b7046c39e0dcf9855f03849cc796a246366961afd68f86b061d29b0df7df34efd4d3a381aa3fd8647ba9a9d70a3e30fe97224a01d863fa63b33bfa024575a67d2f1f6d44213e49d51cf974c79d013d7ffb112fdb9fa8d075625178bb69c49a94b4b49fea9488fcbc67cd98dc", @nested={0x34, 0x13, [@generic="a987c6d4b534d5cc1b2756128b6353ca0c76a914033064d0f5f5c598256b152b6f88", @typed={0xc, 0x95, @u64=0x7}]}]}, 0x21c}, {&(0x7f0000001b80)=ANY=[@ANYBLOB="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", @ANYRES32=r5, @ANYBLOB='\x00\x00'], 0x88}, {&(0x7f0000001480)={0x25c, 0x3c, 0x20, 0x70bd29, 0x25dfdbfd, "", [@typed={0x10, 0xc, @str='/dev/midi#\x00'}, @typed={0x8, 0x29, @fd=r0}, @typed={0x8, 0x52, @fd=r0}, @generic="8fa3feda7bac0e41f7dadcc696c4e878d2e7fb3e4d8ca8dfabff2919c7f3efaf36377b01c409bb64e177db83ef35455bfbbc4a1071fe80c967d3ff5aaf6f6d0e0178d6ec9aca36dbe6b7150631da58f6fbe90c18b8b0882b5e84fa62ad42c8308d8253933519da88971fd645a6f1", @nested={0x18, 0x32, [@typed={0xc, 0x4a, @u64=0x3}, @typed={0x8, 0x2d, @uid=r6}]}, @generic="98aff4bbbfdea6e33e0e2cb705a8b68df427b21f87777adb02a5325f7da2e6ec63972fb8ca414647dec00b5a5f0a731dba1bf6ffb3fef239a5a7c0a34038bcf7335fd1096d9208953b60368e199e5d2bf7c0ae21c5ce56f2636901209c21d5e14e2878c1aca269d7543e928e304cf9d67fd7992e635dc4a7dcb1c39759466cbf6103d03b717ab683eb6b51cde03112766ddb2e4dfbacee70ffecafe1", @generic="628d3f15851ef763924abf00b2a3f48bcf6859c4093dd2ef08f1953e80aab7ab6e164f4e104c5d827e4e69325bef07e85d16a2511b30affa5f7a9baebaafcb797e5f8a4202", @typed={0x14, 0x1b, @ipv6=@remote}, @typed={0x94, 0x40, @binary="f0e8ea7fd24a483e058c5e9eb287fe17ffb542e1b603c5c831fa28d92a4e178be047f725c2fecd8b03152cbb77c51d04d9f8daeda1f81bc970d970461be27a99a839bcc30253a48e0029eb2ce65e3bd77c8b6b66e73f058cc1a181c3fe7ccd9d713a60710ac7b58b58b844a0ffd83a5ade8b7d4356b2f5e661a5201dfbfca0f5f2dacaf980a3c73b6704e1ee4992c43b"}, @nested={0x1c, 0x1, [@typed={0x4, 0x53}, @typed={0x14, 0xe, @ipv6=@rand_addr="19f22377a1dcaa989c65ec9a3e348d87"}]}]}, 0x25c}, {&(0x7f0000001700)={0x18, 0x16, 0x100, 0x70bd25, 0x25dfdbff, "", [@typed={0x8, 0x73, @fd=r0}]}, 0x18}], 0x8, &(0x7f0000001a80)=[@cred={0x20, 0x1, 0x2, r7, r8, r9}, @cred={0x20, 0x1, 0x2, r10, r11, r12}, @rights={0x28, 0x1, 0x1, [r0, r0, r0, r4, r0, r1]}, @rights={0x28, 0x1, 0x1, [r2, r4, r4, r2, r2, r2]}, @rights={0x18, 0x1, 0x1, [r1]}], 0xa8, 0x20000800}, 0x48000) write$P9_RXATTRWALK(r1, &(0x7f0000000080)={0x233, 0x1f, 0x2, 0x1}, 0xf) [ 1974.381039] audit: type=1400 audit(1548094250.957:74): avc: denied { node_bind } for pid=13263 comm="syz-executor1" saddr=::1 src=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:node_t:s0 tclass=dccp_socket permissive=1 18:10:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 1974.543154] audit: type=1400 audit(1548094250.967:75): avc: denied { name_connect } for pid=13263 comm="syz-executor1" dest=20000 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:port_t:s0 tclass=dccp_socket permissive=1 18:10:51 executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:10:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1974.669646] audit: type=1400 audit(1548094251.327:76): avc: denied { create } for pid=13287 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1974.715805] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1974.802687] audit: type=1400 audit(1548094251.377:77): avc: denied { write } for pid=13287 comm="syz-executor4" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 [ 1974.912957] audit: type=1400 audit(1548094251.407:78): avc: denied { map } for pid=13295 comm="blkid" path="/sbin/blkid" dev="sda1" ino=16128 scontext=system_u:system_r:kernel_t:s0 tcontext=system_u:object_r:file_t:s0 tclass=file permissive=1 18:10:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000400)='/selinux/enforce\x00', 0x101000, 0x0) recvmsg$kcm(r1, &(0x7f00000003c0)={&(0x7f0000000140)=@rc, 0x80, &(0x7f0000000080)=[{&(0x7f00000001c0)=""/142, 0x8e}, {&(0x7f0000000280)=""/196, 0xc4}], 0x2, &(0x7f0000000380)=""/13, 0xd}, 0x10000) 18:10:54 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:54 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000200)='/dev/uhid\x00', 0xc8000004, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0x0, 0x200040) setsockopt$TIPC_MCAST_REPLICAST(r2, 0x10f, 0x86) r3 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_GET_FP_MODE(0x2e) ioctl$EVIOCSKEYCODE(r2, 0x40084504, &(0x7f00000000c0)=[0x4d93, 0x100000001]) getsockopt$inet6_dccp_buf(r2, 0x21, 0x0, &(0x7f0000000100)=""/48, &(0x7f0000000140)=0x30) dup3(r3, r1, 0x0) prctl$PR_GET_NAME(0x10, &(0x7f0000000040)=""/105) 18:10:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:54 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0xfffffffffffffffe, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 1977.441148] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:54 executing program 1: socketpair$unix(0x1, 0x4000000000001, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) pwrite64(r0, &(0x7f0000000340)="2b5890213830fc133aee0bf87bbc155b875fa58ee31c9ee5ac67e648c65be20ccd4f7abaad", 0x25, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000000)='/dev/dlm-monitor\x00', 0x801, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000002c0)={r2, 0xc, &(0x7f0000000380)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000300)={r3, 0x4, 0x10}, 0xc) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0xa}}, 0x20) sched_yield() write$RDMA_USER_CM_CMD_CONNECT(r2, &(0x7f0000000100)={0x6, 0x118, 0xfa00, {{0x7, 0x57a7, "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", 0x17, 0x2, 0x9, 0x0, 0x4, 0x594, 0xfff, 0x1}, r4}}, 0x120) r5 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r6, r5, 0x0) 18:10:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:54 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:10:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1977.689692] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:10:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x2) write$uinput_user_dev(r0, &(0x7f0000000140)={'syz0\x00', {0x5, 0x401, 0x9, 0x5}, 0xd, [0x4, 0x46, 0x80000000, 0x9, 0x7, 0x0, 0xffffffff, 0x6, 0x10000, 0xffffffffffff7fff, 0x100000000, 0x5, 0x6, 0x6, 0x7ff, 0x7f, 0x800, 0x1, 0x8, 0x0, 0xcfe3d8, 0x1, 0x3, 0x0, 0x2, 0xf6a, 0xcfd1, 0x2fa, 0x3, 0x3, 0x0, 0x8, 0x944, 0xffffffff, 0x6, 0x5, 0x1, 0x5047, 0x10001, 0xfffffffffffffffd, 0x8000, 0x0, 0x7fff, 0x7, 0x4f1, 0x3, 0xfffffffffffffffc, 0x80000001, 0x9, 0x100000000, 0x3, 0x1ee, 0xfffffffffffffff7, 0x3f, 0xffffffffffffafce, 0x7, 0x0, 0x7, 0x1, 0x80000000, 0x1, 0x7, 0x731, 0xa08d], [0xde5d0000000, 0x1, 0x4, 0x4, 0x6, 0x6771, 0xb9, 0x3, 0x9, 0x3, 0x3, 0x8, 0x3, 0x22bb, 0x4, 0x6, 0xfffffffffffff800, 0xc4fa, 0x735c, 0x10001, 0x200, 0x95, 0x5, 0x2, 0x1, 0x4, 0x3, 0x94e5, 0x10000, 0x7, 0x1f, 0x800, 0x0, 0x20, 0x6, 0x4, 0x9, 0x7f, 0x9, 0x5, 0x9, 0x0, 0x35, 0x2, 0x8, 0x7, 0x3, 0x9, 0x0, 0x0, 0x8, 0x8000, 0x1, 0x3, 0x3, 0x2, 0x2, 0x3, 0x3, 0x6, 0xfffffffffffffffc, 0x0, 0x2130, 0x3], [0x5, 0xc7f8, 0x6, 0x1, 0x0, 0x3, 0x93, 0x80, 0x4, 0x100, 0x2, 0x401, 0x5, 0x100000000, 0x8, 0x3, 0x100000000, 0x1ff, 0x8, 0x5, 0x18, 0x1b, 0x7, 0x4, 0x2, 0x4, 0x8, 0x0, 0xfffffffffffffffc, 0x60ca, 0x5, 0x100000000, 0x474, 0x40000, 0x5, 0x17, 0xb024, 0x2, 0x2, 0x50, 0x200, 0x6, 0x37, 0x4, 0x0, 0x4fce, 0x6094, 0x8, 0x8000, 0x1, 0x50f9, 0xffffffff, 0x4, 0x40, 0x1, 0xfffffffffffffffb, 0x4, 0x3ff, 0x201, 0x8, 0x3ff, 0x5, 0x0, 0x10000], [0x8, 0xffffffffffffffff, 0x1ff, 0x8, 0x9, 0x7fff, 0x6, 0x7f, 0x1, 0x1, 0x6, 0x40, 0x7f, 0x8001, 0x5, 0x7f, 0x800, 0x4ce2cab, 0x9, 0x101, 0x10001, 0x1f, 0xffffffffffff0000, 0x7f, 0x7, 0x2, 0x0, 0x7, 0xfff, 0x0, 0x81, 0x6, 0x6, 0x4, 0x0, 0x4c93, 0xffffffff, 0x5, 0x14, 0xfffffffffffffffd, 0x6, 0x1, 0x0, 0x1, 0x61e1006f, 0x1f, 0x4, 0x3ec9df44, 0x20, 0x80000001, 0x966, 0x3, 0x3, 0x6, 0x1, 0x10000, 0x6, 0xffffffffffff6afc, 0x3, 0xcc, 0x5738, 0x6, 0xb916, 0xffffffff]}, 0x45c) 18:10:57 executing program 1: r0 = syz_open_dev$mouse(&(0x7f0000000240)='/dev/input/mouse#\x00', 0x10001, 0x80) ioctl$sock_inet_tcp_SIOCINQ(r0, 0x541b, &(0x7f0000000280)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) creat(&(0x7f0000000140)='./file0\x00', 0x40) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f0000000000)=0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f0000000100)={r3}) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f00000001c0), 0xfffffffffffffdcd) getpgid(0xffffffffffffffff) rt_tgsigqueueinfo(r4, r4, 0x3b, &(0x7f0000000040)={0x2c, 0x7, 0x9}) dup3(r3, r2, 0x0) clock_settime(0x7, &(0x7f0000000180)={0x77359400}) 18:10:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xd040000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) [ 1980.484765] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1980.516944] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:10:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xe000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:10:57 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000180)='/dev/snd/seq\x00', 0x0, 0x3fffffd) prctl$PR_MCE_KILL_GET(0x22) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:10:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:10:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 18:10:57 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = openat$zero(0xffffffffffffff9c, &(0x7f0000000000)='/dev/zero\x00', 0x181000, 0x0) ioctl$LOOP_CHANGE_FD(r3, 0x4c06, r0) dup3(r2, r1, 0x0) 18:10:57 executing program 5: r0 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000200)='/selinux/checkreqprot\x00', 0x0, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000240)=0x8, 0x4) r1 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x40) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000040)='/dev/cachefiles\x00', 0x408200, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000000)={0x4, 0x8, 0x5, 0xd5a, 0x0, 0x2, 0x9, 0x10001, 0x1, 0x80000000, 0x2}, 0xb) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000140)={0x2, 0x0, 0x3ff, 0x2, 0x0}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f00000001c0)={0x72d, 0xffffffff, 0x1, 0x6, 0x5, 0x5, 0x7, 0xf8, r3}, 0x20) [ 1980.717202] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) fremovexattr(r0, &(0x7f0000000000)=@random={'security.', 'nodevselinux\x00'}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x100000001, 0x4000) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r3, 0xfffffffffffffffc) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000080)=0x0) sendto$ax25(r2, &(0x7f00000001c0)="9de03af461446ba284136a6472b68a88863ecd7c45b089f656c2231d2fb5a2a6dabc691649e67616899348f71849a5b73bf5394c5e50d6cdb3ceda0f98ab4590a0082e5da0c2a2d33615e3e9549bd6cd436d9427a1a571d036a5ea6cb3bb6717c5b37e78eb9e184efdefb5b2420c7b324052eebdaa43b7b8461eb1dd101c4ae6488b5770ced0df9af8f5098a808885c090cf59fe0971de83ddb048fb1284179e", 0xa0, 0x20000000, &(0x7f00000002c0)={{0x3, @default, 0x2}, [@bcast, @default, @null, @null, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null]}, 0x48) ioctl$PIO_SCRNMAP(r2, 0x4b41, &(0x7f0000000180)="2962527d92358bcf21aa149c40183dc00fba890b8cb057bd171a4310c8a545") r5 = getpgrp(0xffffffffffffffff) rt_tgsigqueueinfo(r4, r5, 0x27, &(0x7f0000000100)={0xd, 0x1f, 0x3f}) 18:11:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, &(0x7f0000000000), 0x200a00}]) 18:11:00 executing program 5: inotify_init() r0 = syz_open_dev$sndseq(&(0x7f0000000080)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:00 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = dup2(r0, r1) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000040)={0x0, 0x18, 0xfa00, {0x2, &(0x7f0000000000)={0xffffffffffffffff}, 0x111, 0x1009}}, 0x20) write$RDMA_USER_CM_CMD_DISCONNECT(r2, &(0x7f0000000080)={0xa, 0x1, 0xfa00, {r3}}, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r1, 0x0) [ 1983.595994] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x10000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 18:11:00 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x406, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000080)={0x0, @remote, @broadcast}, &(0x7f0000000140)=0xc) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f0000000180)={r2, 0x1, 0x6}, 0x10) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/connector\x00') accept$packet(0xffffffffffffff9c, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000200)=0x14) setsockopt$packet_drop_memb(r3, 0x107, 0x2, &(0x7f0000000240)={r4, 0x1, 0x6, @dev={[], 0x13}}, 0x10) 18:11:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1983.811445] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:03 executing program 1: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendto(r0, &(0x7f00000002c0)="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", 0x1000, 0x10, &(0x7f0000000000)=@in6={0xa, 0x4e20, 0x3f, @initdev={0xfe, 0x88, [], 0x1, 0x0}, 0x8}, 0x80) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/avc/hash_stats\x00', 0x0, 0x0) accept$netrom(r3, &(0x7f0000000100)={{0x3, @null}, [@bcast, @bcast, @null, @rose, @default, @rose, @default]}, &(0x7f0000000180)=0xffffffffffffff4b) ioctl$EVIOCRMFF(r3, 0x40044581, &(0x7f00000001c0)) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r2, 0x0) 18:11:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x20000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:03 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_threshold\x00', 0x2, 0x0) ioctl$BLKTRACESTART(r1, 0x1274, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) [ 1986.646235] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:03 executing program 5: r0 = syz_open_dev$adsp(&(0x7f0000000040)='/dev/adsp#\x00', 0x483, 0x10000) ioctl$VIDIOC_SUBDEV_S_FRAME_INTERVAL(r0, 0xc0305616, &(0x7f0000000080)={0x0, {0x9}}) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:03 executing program 1: openat$vicodec1(0xffffffffffffff9c, &(0x7f0000000000)='/dev/video37\x00', 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) [ 1986.712489] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, 0x0}]) 18:11:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x48000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1987.029381] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:06 executing program 5: r0 = semget(0x1, 0x7, 0x8) semctl$GETALL(r0, 0x0, 0xd, &(0x7f0000000240)=""/180) r1 = fcntl$getown(0xffffffffffffffff, 0x9) sched_getattr(r1, &(0x7f0000000040), 0x30, 0x0) r2 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) openat$udambuf(0xffffffffffffff9c, &(0x7f0000000080)='/dev/udmabuf\x00', 0x2) ioctl$SNDRV_TIMER_IOCTL_INFO(r2, 0x80e85411, &(0x7f0000000200)=""/51) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:06 executing program 1: socketpair$unix(0x1, 0x29, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(0xffffffffffffffff, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) ioctl$UI_SET_ABSBIT(0xffffffffffffffff, 0x40045567, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(r0, 0x6, 0x21, &(0x7f0000000040)="5b5d12a4553d4ed8a0bccbe8186897ea", 0x10) 18:11:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4c000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:06 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)) [ 1989.726337] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:06 executing program 1: socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) ioctl(r2, 0x101, &(0x7f0000000000)="ddcafd1b5071812809bda8d7f54f") 18:11:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:06 executing program 2: socket$inet_udplite(0x2, 0x2, 0x88) connect$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1}, 0x1c) syz_open_dev$adsp(0x0, 0xeb, 0x42200) syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000800)=ANY=[@ANYBLOB=',dioread_lock,debug_want_extra_isize=0x0000000000008000,bsddf,inode_readahead_blks=0x0000000000000000,obj_']) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x8980, 0x0) r0 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r0, 0xc02c5638, &(0x7f00000003c0)={0x100000000}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) renameat(r0, &(0x7f0000000040)='.//ile0\x00', r0, &(0x7f00000007c0)='./file0/f.le.\x00') getsockopt$IP6T_SO_GET_INFO(r0, 0x29, 0x40, &(0x7f0000000980)={'nat\x00'}, 0x0) ioctl$DMA_BUF_IOCTL_SYNC(0xffffffffffffffff, 0x40086200, &(0x7f0000000040)=0x2) 18:11:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x60000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:06 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) open(&(0x7f0000000040)='./file0\x00', 0x210400, 0x40) [ 1989.992107] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:06 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = dup(r0) stat(&(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = getuid() mount$9p_xen(&(0x7f0000000100)='\x00', &(0x7f0000000140)='./file0\x00', &(0x7f0000000180)='9p\x00', 0x100000, &(0x7f0000000280)={'trans=xen,', {[{@dfltgid={'dfltgid', 0x3d, r5}}, {@access_client='access=client'}, {@privport='privport'}, {@cachetag={'cachetag'}}, {@noextend='noextend'}], [{@euid_gt={'euid>', r6}}, {@pcr={'pcr', 0x3d, 0x19}}, {@permit_directio='permit_directio'}, {@smackfsfloor={'smackfsfloor', 0x3d, '@$lovboxnet0em0'}}]}}) dup3(r3, r2, 0x0) getsockopt$inet_dccp_buf(r4, 0x21, 0x0, &(0x7f0000000040)=""/32, &(0x7f0000000080)=0x20) [ 1990.415339] overlayfs: filesystem on './file0' not supported as upperdir 18:11:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:09 executing program 5: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) prctl$PR_GET_SECCOMP(0x15) fsetxattr$security_smack_transmute(r0, &(0x7f0000000240)='security.SMACK64TRANSMUTE\x00', &(0x7f0000000280)='TRUE', 0x4, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) sendto$rxrpc(r1, &(0x7f0000000140)="d7e5b29b739fc97f8624282cf6eac97988984bdf2aee8d89660e38dd73df8aab970d58feb411161780f3ee47a93614b8331b53243f4f2edc0604812221da51845f1689c24f460c16d8246b04b0e5dd0172e67fd4cf3964d853d339fff9ee40fe0046c799031cece9cbe4183cfdec6f720698d67f715654bbede39ebc35e6cb5911dc8b6f4406a2cff2543d049856", 0x8e, 0x4040, &(0x7f0000000200)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x4e22, @rand_addr=0xffffffffffff8000}}, 0x24) connect$x25(r1, &(0x7f0000000080)={0x9, @remote={[], 0x3}}, 0x12) 18:11:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x68000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000000)='/selinux/avc/cache_stats\x00', 0x0, 0x0) connect$l2tp(r2, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast2}, 0x4, 0x4, 0x4}}, 0x26) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) prctl$PR_GET_DUMPABLE(0x3) r4 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r4, r3, 0x0) 18:11:09 executing program 2: pipe(&(0x7f00000012c0)={0xffffffffffffffff}) poll(&(0x7f0000000100)=[{r0, 0x21}], 0x13, 0x0) 18:11:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r2 = dup3(r0, r1, 0x80000) ioctl$KVM_SET_ONE_REG(r2, 0x4010aeac, &(0x7f0000000000)={0x1ff8000000000, 0x6}) r3 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f0000000040)='/proc/self/attr/current\x00', 0x2, 0x0) dup3(r4, r3, 0x0) [ 1992.832663] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:09 executing program 2: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) [ 1992.884877] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:09 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f00000002c0)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000100)={0x0, 0x100000}) ioctl$KVM_GET_REG_LIST(0xffffffffffffffff, 0xc008aeb0, &(0x7f0000000040)=ANY=[@ANYBLOB="ff01f0"]) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000028000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 18:11:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6c000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:09 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100)='/dev/zero\x00', 0x242000, 0x0) ioctl$PERF_EVENT_IOC_RESET(r2, 0x2403, 0x249) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x40, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000040)=[@mss={0x2, 0x1}, @window={0x3, 0x0, 0xda0}, @mss={0x2, 0xf7e}, @timestamp, @sack_perm, @sack_perm], 0x6) ioctl$TIOCGPGRP(r3, 0x540f, &(0x7f00000001c0)=0x0) creat(&(0x7f0000000380)='./file0\x00', 0x92) perf_event_open(&(0x7f0000000140)={0x7, 0x70, 0x7ff, 0x1, 0x3, 0xfff, 0x0, 0x401, 0x8000, 0x0, 0x8, 0x7, 0x61e6, 0xff, 0xeb, 0x5, 0x93f, 0x22ae6e38, 0x8c, 0x9, 0x7fffffff, 0x48, 0x2, 0x1b30, 0x5, 0x400, 0x1ff, 0x8001, 0x9, 0x7fff, 0x0, 0x5, 0x8, 0x2, 0x10000, 0x0, 0x800, 0x0, 0x0, 0x8e, 0x1, @perf_config_ext={0x81, 0x80000001}, 0x20000, 0x24d, 0x4, 0x7, 0x10001, 0x7, 0x8}, r4, 0x9, 0xffffffffffffffff, 0x1) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x8912, 0x400200) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_NODES(r0, &(0x7f0000000340)={&(0x7f0000000200), 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, r5, 0x606, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x200040c0) r6 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r7 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r7, r6, 0x0) ioctl$FS_IOC_SETFLAGS(r3, 0x40086602, &(0x7f0000000080)=0x100) [ 1993.028025] audit: type=1400 audit(1548094269.687:79): avc: denied { map } for pid=13556 comm="syz-executor2" path="/dev/sg0" dev="devtmpfs" ino=1580 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:scsi_generic_device_t:s0 tclass=chr_file permissive=1 [ 1993.143762] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1993.171948] kvm: emulating exchange as write [ 1993.217214] audit: type=1400 audit(1548094269.877:80): avc: denied { read } for pid=13570 comm="syz-executor1" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=netlink_generic_socket permissive=1 18:11:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:12 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r0, &(0x7f0000000e00)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000c3d04bbc9c323aaf18ab8766"]) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r6, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) accept(r6, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r5, 0x2}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="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"}) 18:11:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x81, 0x400) getsockopt$inet_tcp_buf(r1, 0x6, 0x3f, &(0x7f0000000180)=""/186, &(0x7f0000000240)=0xba) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) r4 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000000)='/proc/capi/capi20\x00', 0x80000, 0x0) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000040)={'nat\x00'}, &(0x7f0000000100)=0x54) 18:11:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x74000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:12 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r10 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0x40a85321, &(0x7f0000000500)={0x0, 0x0, 0x3, [0x0, 0x0, 0x1f000000]}) [ 1995.872152] audit: type=1400 audit(1548094272.527:81): avc: denied { map } for pid=13579 comm="syz-executor2" path="/dev/binder0" dev="devtmpfs" ino=17737 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=system_u:object_r:device_t:s0 tclass=chr_file permissive=1 [ 1995.906339] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x4001ff) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) preadv(r2, &(0x7f0000000240)=[{&(0x7f0000000000)=""/177, 0xb1}, {&(0x7f0000000100)}, {&(0x7f0000000140)=""/212, 0xd4}], 0x3, 0x0) dup3(r2, r1, 0x0) 18:11:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1995.928654] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1995.973503] audit: type=1400 audit(1548094272.617:82): avc: denied { set_context_mgr } for pid=13579 comm="syz-executor2" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 [ 1995.998811] binder_alloc: 13579: binder_alloc_buf, no vma 18:11:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7a000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1996.017632] binder: 13579:13596 transaction failed 29189/-3, size 24-8 line 3035 18:11:12 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r10 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0x40a85321, &(0x7f0000000500)={0x0, 0x0, 0x3, [0x0, 0x0, 0x1f000000]}) [ 1996.060256] binder: 13579:13605 unknown command 262144 [ 1996.062608] audit: type=1400 audit(1548094272.657:83): avc: denied { call } for pid=13579 comm="/group.stat" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=binder permissive=1 18:11:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:12 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = syz_open_dev$sndpcmp(&(0x7f0000000040)='/dev/snd/pcmC#D#p\x00', 0x7, 0x400400) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f0000000080)) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r2, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) [ 1996.106703] binder: 13579:13596 Release 1 refcount change on invalid ref 1 ret -22 [ 1996.118876] binder: 13579:13605 ioctl c0306201 200002c0 returned -22 [ 1996.137605] binder: 13579:13596 BC_ACQUIRE_DONE u0000000000000000 no match [ 1996.187139] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1996.201951] binder: 13579:13607 BC_ACQUIRE_DONE u0000000000000000 node 1 cookie mismatch 0000000000000002 != 0000000000000000 [ 1996.261609] binder: 13579:13607 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1996.300403] binder: 13579:13607 Release 1 refcount change on invalid ref 2 ret -22 [ 1996.689529] binder: BINDER_SET_CONTEXT_MGR already set [ 1996.692582] binder: 13579:13626 unknown command 262144 [ 1996.697339] binder: 13579:13607 ioctl 40046207 0 returned -16 [ 1996.700656] binder_alloc: 13579: binder_alloc_buf, no vma [ 1996.707867] binder: 13579:13626 ioctl c0306201 200002c0 returned -22 [ 1996.719145] binder: 13579:13626 Release 1 refcount change on invalid ref 1 ret -22 [ 1996.725999] binder: 13579:13625 transaction failed 29189/-3, size 24-8 line 3035 [ 1996.735278] binder: 13579:13626 BC_ACQUIRE_DONE u0000000000000000 no match [ 1996.781315] binder: 13579:13628 BC_ACQUIRE_DONE u0000000000000000 no match [ 1996.788555] binder: 13579:13628 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1996.796274] binder: 13579:13628 Release 1 refcount change on invalid ref 2 ret -22 18:11:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x9effffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cachefiles\x00', 0x80, 0x0) dup3(r2, r1, 0x0) 18:11:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:15 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) r10 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r10, 0x40a85321, &(0x7f0000000500)={0x0, 0x0, 0x3, [0x0, 0x0, 0x1f000000]}) 18:11:15 executing program 2: r0 = perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x8, 0x2, 0x9, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x3}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x8) setxattr$security_smack_entry(&(0x7f0000000380)='./file0\x00', &(0x7f0000000480)='security.SMACK64IPIN\x00', &(0x7f0000000540)='^vboxnet1^\x00', 0xb, 0x1) r1 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000840)='/selinux/checkreqprot\x00', 0xb41, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000880)={r0, &(0x7f0000000e00)="24df18166c0fc628688448574a5c90e4452a4e015be7e1e88ee92c6c7a016f86aa4f3ab18a23350b7112ad55311a0123b723e9a7a8c37f1bdf9445db5749d9ad784550ba4d24f9f5429a1f73e32933b11d5776c04fbbeb5ff660bc9c7413f527547686907e2474163e33505e5dd963e63171f4441be640fae2d65f40815d52a9118d090f104c0770ad5eabf1", 0x0, 0x1}, 0x20) unlink(&(0x7f0000000900)='./file0/file0\x00') r2 = syz_open_dev$binder(&(0x7f0000000400)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r3 = syz_open_dev$binder(&(0x7f0000000040)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x0, 0x10, r3, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r0, 0xc018620b, &(0x7f00000006c0)={0x0}) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000640)={r4}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000140)={0x4, 0x0, &(0x7f00000000c0)=[@enter_looper], 0x48, 0x0, &(0x7f0000000700)="2ba063fb309ec7fdbfb08e6e91baee7d7d4599fe14129a4d426834556ae420e087d59c0c7be7fcad1abb7e1f8f446f373f611ca1ee9c2231708e18a47bc68a2a79a0b48931f6ff6d"}) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) prctl$PR_SET_NAME(0xf, &(0x7f00000004c0)='/group.stat\x00') ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000440)={0x44, 0x0, &(0x7f0000000300)=[@transaction={0x40406300, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x8, &(0x7f0000000200)=[@flat={0x73622a85}], &(0x7f0000000240)=[0x0]}}], 0xfffffffffffffe43, 0x0, &(0x7f00000003c0)}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000002c0)={0x8, 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0000040000000000"], 0x0, 0x0, 0x0}) ioctl$ASHMEM_SET_SIZE(r1, 0x40087703, 0x2) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000500)=[@release={0x40046306, 0x1}], 0x0, 0x0, &(0x7f0000000680)}) ioctl$FS_IOC_FIEMAP(r3, 0xc020660b, &(0x7f0000000ec0)=ANY=[@ANYBLOB="0000010000000000200000000000000005000000010000000a00000000000000ff030000000000001a0a000000000000050000000000000000000000000000000000000000000000080000000000000000000000000000000800000000000000ffff0000000000000100008000000000000000000000000000000000000000000000000000000000000000000000000008000000000000003f0000000000000008000000000000000000000000000000000000000000800800000000000000000000000000000200000000000000000400000000000000000000010000000000000000000000000000000000000002110000000000000000000000000000cc0000000000000000000000000000001b0000000000000000000000000000000000000000000000841400000000000000000000000000000300000000000000feffffffffffffff000000000000000000000000000000000000000000000000020000000000000000000000000000000600000000000000ff01000000000000040000000000000000000000000000000000000000000000000400000000000000000000000000007be70000000000000900000000000000ff7f0000000000000000000000000000000000000000000004180000000000000000000000000000ffffffff0000000081000000000000000600000000000000000000000000000000000000000000000400000000000000000000000000000002000000000000000500000000000000ff7fffffffffffff0000000000000000000000000000000004040000000000000000000000000000c3d04bbc9c323aaf18ab8766"]) r6 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) accept$unix(r6, &(0x7f00000007c0)=@abs, &(0x7f0000000000)=0x6e) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='/group.stat\x00', 0x2761, 0x0) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, &(0x7f0000000080), 0xffffffffffffffff) getpid() setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2f, 0x0, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0xe, 0x0, &(0x7f0000000680)=[@acquire_done], 0xfffffffffffffeb3, 0x0, &(0x7f00000007c0)}) memfd_create(&(0x7f0000000080)='!proccgroup\x00', 0x0) accept(r6, &(0x7f0000000580)=@alg, &(0x7f0000000600)=0x80) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x2400, 0x8000) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f00000008c0)={0x2c, 0x0, &(0x7f0000000780)=[@acquire_done={0x40106309, r5, 0x2}, @clear_death={0x400c630f, 0x1, 0x3}, @release={0x40046306, 0x2}], 0x160, 0x0, &(0x7f0000000940)="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"}) [ 1998.887389] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa0008000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:15 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) prctl$PR_SVE_GET_VL(0x33, 0x15efe) dup3(r2, r1, 0x0) [ 1999.072971] binder: BINDER_SET_CONTEXT_MGR already set 18:11:15 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) [ 1999.096149] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1999.099844] binder: 13639:13648 ioctl 40046207 0 returned -16 [ 1999.125433] binder_alloc: 13579: binder_alloc_buf, no vma 18:11:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 1999.160894] binder: 13639:13652 transaction failed 29189/-3, size 24-8 line 3035 18:11:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa0018000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 1999.308454] binder: 13639:13648 unknown command 262144 [ 1999.325328] binder: 13639:13648 ioctl c0306201 200002c0 returned -22 [ 1999.350519] binder: 13639:13648 Release 1 refcount change on invalid ref 1 ret -22 [ 1999.358788] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 1999.441456] binder: 13639:13648 BC_ACQUIRE_DONE u0000000000000000 no match [ 1999.488337] binder: 13639:13652 BC_ACQUIRE_DONE u0000000000000000 no match [ 1999.495515] binder: 13639:13652 BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 1999.502458] binder: 13639:13652 Release 1 refcount change on invalid ref 2 ret -22 18:11:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = dup3(r1, r0, 0x1) getsockopt$inet6_tcp_int(r2, 0x6, 0x17, &(0x7f0000000180), &(0x7f00000001c0)=0x4) setsockopt$RDS_GET_MR(r2, 0x114, 0x2, &(0x7f0000000140)={{&(0x7f0000000000)=""/174, 0xae}, &(0x7f0000000100), 0x11}, 0x20) 18:11:18 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0ffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:18 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) ioctl$SCSI_IOCTL_STOP_UNIT(r1, 0x6) 18:11:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2002.002462] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:18 executing program 2 (fault-call:5 fault-nth:0): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:18 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r1, r0, 0x80000) [ 2002.053467] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:18 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfffff000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:18 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) r9 = socket$inet_dccp(0x2, 0x6, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {r9, 0x8000}], 0x9, 0xefa) [ 2002.250875] FAULT_INJECTION: forcing a failure. [ 2002.250875] name failslab, interval 1, probability 0, space 0, times 0 [ 2002.269652] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2002.279908] CPU: 1 PID: 13697 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2002.287036] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2002.296400] Call Trace: 18:11:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2002.299008] dump_stack+0x1db/0x2d0 [ 2002.302659] ? dump_stack_print_info.cold+0x20/0x20 [ 2002.307688] ? add_lock_to_list.isra.0+0x450/0x450 [ 2002.312644] should_fail.cold+0xa/0x15 [ 2002.316550] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2002.321691] ? ___might_sleep+0x1e7/0x310 [ 2002.325854] ? arch_local_save_flags+0x50/0x50 [ 2002.330452] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2002.334900] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2002.336010] __should_failslab+0x121/0x190 [ 2002.336034] should_failslab+0x9/0x14 [ 2002.336052] kmem_cache_alloc+0x2be/0x710 [ 2002.336084] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2002.362268] ? _copy_from_user+0xdd/0x150 [ 2002.366537] io_submit_one+0x175/0x1050 [ 2002.370543] ? find_held_lock+0x35/0x120 [ 2002.374625] ? aio_poll+0x14e0/0x14e0 [ 2002.378447] ? lock_downgrade+0x910/0x910 [ 2002.382606] ? lock_release+0xc40/0xc40 [ 2002.386626] __x64_sys_io_submit+0x1c4/0x5d0 [ 2002.391058] ? __ia32_sys_io_destroy+0x590/0x590 [ 2002.395849] ? do_syscall_64+0x8c/0x800 18:11:19 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffff7f, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2002.399840] ? trace_hardirqs_on+0xbd/0x310 [ 2002.404175] ? __ia32_sys_read+0xb0/0xb0 [ 2002.408290] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2002.413674] ? trace_hardirqs_off_caller+0x300/0x300 [ 2002.418796] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2002.424355] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2002.429138] do_syscall_64+0x1a3/0x800 [ 2002.433041] ? __ia32_sys_io_destroy+0x590/0x590 [ 2002.437816] ? do_syscall_64+0x1a3/0x800 [ 2002.441894] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2002.446843] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2002.451881] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2002.456753] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2002.461955] RIP: 0033:0x458099 [ 2002.465160] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2002.477322] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2002.484065] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2002.484091] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2002.484101] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3d2000 [ 2002.484111] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2002.484121] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2002.484132] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:21 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = dup3(r2, r1, 0x0) ioctl$sock_ax25_SIOCADDRT(r3, 0x890b, &(0x7f0000000000)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @null, 0x7, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) write$binfmt_aout(r3, &(0x7f00000002c0)={{0x107, 0x3, 0x3, 0x195, 0x2c9, 0x7, 0x197, 0x5}, "de9b20f9dea4b68bcc6d15432f7b084f5c0df6c38afc7f51b500834d2a30e8e0b47d684b4cfbdbecd7fb50649afc25bf742a60afa164bf9cc529729dfb5dafd73fdaa3747ae2137a79ed7f53f9e50087afa1a4337e1901109769af695e26b1ff69b2dcc03121864d93365caa5c2a5636196ad5dfcd544b37e76bed8c917683b514c9c25101ab417c25d13c28872c5d89f6abbf2f44edd9a01e55abf9e343926d3096b1f755e6514d8474a82cd0f6cb910aae586f9a674c85f20859", [[], [], []]}, 0x3db) 18:11:21 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffff9e, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:21 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) r8 = socket$caif_seqpacket(0x25, 0x5, 0x3) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {r8, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:21 executing program 2 (fault-call:5 fault-nth:1): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2005.099673] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2005.117713] FAULT_INJECTION: forcing a failure. [ 2005.117713] name failslab, interval 1, probability 0, space 0, times 0 [ 2005.185019] CPU: 0 PID: 13730 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2005.192186] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2005.201542] Call Trace: [ 2005.204151] dump_stack+0x1db/0x2d0 [ 2005.207797] ? dump_stack_print_info.cold+0x20/0x20 [ 2005.212850] should_fail.cold+0xa/0x15 [ 2005.216766] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2005.221894] ? ___might_sleep+0x1e7/0x310 [ 2005.226085] ? arch_local_save_flags+0x50/0x50 [ 2005.230688] ? print_usage_bug+0xd0/0xd0 [ 2005.234777] __should_failslab+0x121/0x190 [ 2005.239057] should_failslab+0x9/0x14 [ 2005.242894] kmem_cache_alloc+0x2be/0x710 [ 2005.247053] ? mark_held_locks+0x100/0x100 [ 2005.251313] ? __sanitizer_cov_trace_const_cmp2+0x18/0x20 [ 2005.256876] ptlock_alloc+0x20/0x70 [ 2005.260524] pte_alloc_one+0x6d/0x1a0 [ 2005.264342] __handle_mm_fault+0x437d/0x55a0 [ 2005.268778] ? vmf_insert_mixed_mkwrite+0x40/0x40 [ 2005.273638] ? check_preemption_disabled+0x48/0x290 [ 2005.278671] ? handle_mm_fault+0x3cc/0xc80 [ 2005.282945] ? lock_downgrade+0x910/0x910 [ 2005.287118] ? kasan_check_read+0x11/0x20 [ 2005.291284] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2005.296578] ? rcu_read_unlock_special+0x380/0x380 [ 2005.301519] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2005.307087] ? check_preemption_disabled+0x48/0x290 [ 2005.312163] handle_mm_fault+0x4ec/0xc80 [ 2005.316253] ? __handle_mm_fault+0x55a0/0x55a0 [ 2005.320851] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2005.326407] ? vmacache_update+0x114/0x140 [ 2005.330737] __do_page_fault+0x5da/0xd60 [ 2005.334835] do_page_fault+0xe6/0x7d8 [ 2005.338654] ? add_lock_to_list.isra.0+0x450/0x450 [ 2005.343598] ? vmalloc_sync_all+0x30/0x30 [ 2005.347772] ? find_held_lock+0x35/0x120 [ 2005.351851] ? __might_fault+0x12b/0x1e0 [ 2005.355938] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2005.360807] page_fault+0x1e/0x30 [ 2005.364279] RIP: 0010:__get_user_4+0x21/0x30 [ 2005.368698] Code: 50 ff 31 c0 0f 1f 00 c3 90 48 83 c0 03 72 55 65 48 8b 14 25 40 ee 01 00 48 3b 82 18 14 00 00 73 43 48 19 d2 48 21 d0 0f 1f 00 <8b> 50 fd 31 c0 0f 1f 00 c3 66 0f 1f 44 00 00 48 83 c0 07 72 25 65 [ 2005.387615] RSP: 0018:ffff888030907c00 EFLAGS: 00010206 [ 2005.392988] RAX: 00007fe80e3f3003 RBX: 1ffff11006120f85 RCX: ffffc9000e8c3000 [ 2005.400263] RDX: ffffffffffffffff RSI: ffffffff81b4ed03 RDI: 0000000000000282 [ 2005.407542] RBP: ffff888030907d30 R08: ffff88802df60340 R09: 0000000000000001 [ 2005.414820] R10: 0000000000000000 R11: 0000000000000001 R12: ffff888030907d08 [ 2005.422111] R13: ffff88802df60340 R14: ffff8880909158c0 R15: 1ffff11006120fac [ 2005.429417] ? __might_fault+0x1a3/0x1e0 [ 2005.433516] ? lookup_ioctx+0xdc/0xaf0 [ 2005.437433] ? free_ioctx+0x70/0x70 [ 2005.441102] ? wait_for_completion+0x810/0x810 [ 2005.445710] ? check_preemption_disabled+0x48/0x290 [ 2005.450755] __x64_sys_io_submit+0x129/0x5d0 [ 2005.455178] ? __ia32_sys_io_destroy+0x590/0x590 [ 2005.459948] ? do_syscall_64+0x8c/0x800 [ 2005.463938] ? lockdep_hardirqs_on+0x415/0x5d0 [ 2005.468540] ? trace_hardirqs_on+0xbd/0x310 [ 2005.472909] ? __ia32_sys_read+0xb0/0xb0 [ 2005.476984] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.477004] ? trace_hardirqs_off_caller+0x300/0x300 [ 2005.477019] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2005.477038] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2005.477064] do_syscall_64+0x1a3/0x800 [ 2005.501675] ? __ia32_sys_io_destroy+0x590/0x590 [ 2005.506446] ? do_syscall_64+0x1a3/0x800 [ 2005.510527] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2005.515520] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2005.520559] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2005.520590] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2005.520606] RIP: 0033:0x458099 [ 2005.530637] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2005.530647] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2005.530663] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2005.530676] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 [ 2005.574983] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 18:11:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2005.582258] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2005.582271] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:24 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) syz_open_dev$dmmidi(&(0x7f0000000080)='/dev/dmmidi#\x00', 0x0, 0x0) openat$hwrng(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/hwrng\x00', 0x40, 0x0) syz_open_dev$amidi(&(0x7f0000000100)='/dev/amidi#\x00', 0x80000001, 0x40) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x400000, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x0) syz_open_dev$vcsn(&(0x7f0000000000)='/dev/vcs#\x00', 0x80000000, 0x20000) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000040)='/dev/uhid\x00', 0x1000, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:11:24 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfffffff0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:24 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000000400)={r7, @in={{0x2, 0x4e21}}, 0x20, 0x8001}, &(0x7f00000004c0)=0x90) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:24 executing program 2 (fault-call:5 fault-nth:2): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2008.118399] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2008.159465] FAULT_INJECTION: forcing a failure. [ 2008.159465] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.187878] CPU: 1 PID: 13766 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2008.195008] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.204365] Call Trace: [ 2008.206972] dump_stack+0x1db/0x2d0 [ 2008.210628] ? dump_stack_print_info.cold+0x20/0x20 [ 2008.215660] ? add_lock_to_list.isra.0+0x450/0x450 [ 2008.220631] should_fail.cold+0xa/0x15 [ 2008.224532] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2008.229657] ? ___might_sleep+0x1e7/0x310 [ 2008.233822] ? arch_local_save_flags+0x50/0x50 [ 2008.238419] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2008.243979] __should_failslab+0x121/0x190 [ 2008.248232] should_failslab+0x9/0x14 [ 2008.252043] kmem_cache_alloc+0x2be/0x710 [ 2008.256216] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2008.261753] ? _copy_from_user+0xdd/0x150 [ 2008.265908] io_submit_one+0x175/0x1050 [ 2008.269883] ? find_held_lock+0x35/0x120 [ 2008.273937] ? aio_poll+0x14e0/0x14e0 [ 2008.277752] ? lock_downgrade+0x910/0x910 [ 2008.281912] ? lock_release+0xc40/0xc40 [ 2008.285928] __x64_sys_io_submit+0x1c4/0x5d0 [ 2008.290343] ? __ia32_sys_io_destroy+0x590/0x590 [ 2008.295109] ? do_syscall_64+0x8c/0x800 [ 2008.299110] ? trace_hardirqs_on+0xbd/0x310 [ 2008.303440] ? __ia32_sys_read+0xb0/0xb0 [ 2008.307512] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2008.312887] ? trace_hardirqs_off_caller+0x300/0x300 [ 2008.317988] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2008.323523] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2008.328290] do_syscall_64+0x1a3/0x800 [ 2008.332177] ? __ia32_sys_io_destroy+0x590/0x590 [ 2008.336931] ? do_syscall_64+0x1a3/0x800 [ 2008.340997] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2008.345933] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2008.350967] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2008.355831] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2008.361028] RIP: 0033:0x458099 [ 2008.364220] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2008.383108] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2008.390807] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2008.398118] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 18:11:25 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x40030000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:25 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) fremovexattr(r0, &(0x7f0000000000)=@known='trusted.overlay.upper\x00') dup3(r2, r1, 0x0) [ 2008.405397] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2008.412664] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2008.419919] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:25 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000380)={0x0, 0x7}, &(0x7f00000003c0)=0x8) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:25 executing program 2 (fault-call:5 fault-nth:3): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2008.572491] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2008.709629] FAULT_INJECTION: forcing a failure. [ 2008.709629] name failslab, interval 1, probability 0, space 0, times 0 [ 2008.753813] CPU: 0 PID: 13789 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2008.760943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2008.770310] Call Trace: [ 2008.772922] dump_stack+0x1db/0x2d0 [ 2008.776592] ? dump_stack_print_info.cold+0x20/0x20 [ 2008.781628] ? print_usage_bug+0xd0/0xd0 [ 2008.785714] should_fail.cold+0xa/0x15 [ 2008.789623] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2008.794756] ? ___might_sleep+0x1e7/0x310 [ 2008.798915] ? arch_local_save_flags+0x50/0x50 [ 2008.803570] ? iov_iter_alignment+0x234/0xcf0 [ 2008.808117] __should_failslab+0x121/0x190 [ 2008.812377] should_failslab+0x9/0x14 [ 2008.816195] kmem_cache_alloc+0x2be/0x710 [ 2008.820359] ? print_usage_bug+0xd0/0xd0 [ 2008.824438] ? debug_smp_processor_id+0x1c/0x20 [ 2008.824455] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2008.824523] do_blockdev_direct_IO+0x5a5/0xdc10 [ 2008.824558] ? __lock_acquire+0x572/0x4a30 [ 2008.838848] ? add_lock_to_list.isra.0+0x450/0x450 [ 2008.848066] ? mark_held_locks+0x100/0x100 [ 2008.852335] ? __lock_is_held+0xb6/0x140 [ 2008.856423] ? check_preemption_disabled+0x48/0x290 [ 2008.861453] ? add_lock_to_list.isra.0+0x450/0x450 [ 2008.866402] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.871975] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.877543] ? check_preemption_disabled+0x48/0x290 [ 2008.883050] ? write_end_fn+0xf0/0xf0 [ 2008.886853] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2008.891512] ? sb_init_dio_done_wq+0x90/0x90 [ 2008.895904] ? __lock_is_held+0xb6/0x140 [ 2008.899967] ? arch_local_save_flags+0x50/0x50 [ 2008.904549] ? __ext4_handle_dirty_metadata+0x1e3/0x570 [ 2008.909904] ? kasan_check_write+0x14/0x20 [ 2008.914125] ? ext4_mark_iloc_dirty+0x1947/0x2f00 [ 2008.918967] ? ext4_chunk_trans_blocks+0x30/0x30 [ 2008.923756] ? __might_sleep+0x95/0x190 [ 2008.927718] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2008.933236] ? __ext4_journal_get_write_access+0x70/0xa0 [ 2008.938682] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.944207] ? ext4_mark_inode_dirty+0x257/0xb80 [ 2008.949099] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2008.954647] ? invalidate_inode_pages2_range+0x159f/0x1d10 [ 2008.960259] ? add_lock_to_list.isra.0+0x450/0x450 [ 2008.965184] ? pagecache_isize_extended+0x430/0x430 [ 2008.970187] ? __lock_is_held+0xb6/0x140 [ 2008.974253] ? add_lock_to_list.isra.0+0x450/0x450 [ 2008.979169] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.984691] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2008.990229] ? check_preemption_disabled+0x48/0x290 [ 2008.995239] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2008.999908] __blockdev_direct_IO+0xa1/0xca [ 2009.004216] ? write_end_fn+0xf0/0xf0 [ 2009.008007] ext4_direct_IO+0x10a3/0x2090 [ 2009.012140] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2009.016802] ? ext4_iomap_end+0x7e0/0x7e0 [ 2009.020936] ? generic_update_time+0x268/0x440 [ 2009.025719] ? file_remove_privs+0x500/0x500 [ 2009.030119] ? preempt_count_add+0xbc/0x1b0 [ 2009.034435] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.039962] ? preempt_count_add+0xbc/0x1b0 [ 2009.044269] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.049807] ? __mnt_drop_write+0x5d/0x80 [ 2009.053986] ? __mnt_drop_write_file+0x31/0x40 [ 2009.058551] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2009.064141] ? filemap_check_errors+0xd8/0x110 [ 2009.068719] generic_file_direct_write+0x214/0x4b0 [ 2009.073659] __generic_file_write_iter+0x2ee/0x630 [ 2009.078586] ext4_file_write_iter+0x37a/0x1410 [ 2009.083161] ? ext4_file_mmap+0x410/0x410 [ 2009.087315] ? aio_write+0x501/0x640 [ 2009.091019] ? lock_downgrade+0x910/0x910 [ 2009.095162] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2009.099902] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2009.105427] ? __sb_start_write+0x1ac/0x360 [ 2009.109752] aio_write+0x3ba/0x640 [ 2009.113278] ? kmem_cache_alloc+0x572/0x710 [ 2009.117633] ? aio_read+0x4c0/0x4c0 [ 2009.121243] ? find_held_lock+0x35/0x120 [ 2009.125291] ? __might_fault+0x12b/0x1e0 [ 2009.129344] ? lock_release+0xc40/0xc40 [ 2009.133306] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2009.138616] io_submit_one+0xbd4/0x1050 [ 2009.142595] ? aio_poll+0x14e0/0x14e0 [ 2009.146387] ? lock_downgrade+0x910/0x910 [ 2009.150537] __x64_sys_io_submit+0x1c4/0x5d0 [ 2009.154934] ? __ia32_sys_io_destroy+0x590/0x590 [ 2009.159691] ? do_syscall_64+0x8c/0x800 [ 2009.163656] ? trace_hardirqs_on+0xbd/0x310 [ 2009.167962] ? __ia32_sys_read+0xb0/0xb0 [ 2009.172010] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2009.177361] ? trace_hardirqs_off_caller+0x300/0x300 [ 2009.182448] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2009.187972] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2009.192716] do_syscall_64+0x1a3/0x800 [ 2009.196592] ? __ia32_sys_io_destroy+0x590/0x590 [ 2009.201346] ? do_syscall_64+0x1a3/0x800 [ 2009.205394] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2009.210320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2009.215329] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2009.220198] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2009.225370] RIP: 0033:0x458099 [ 2009.228549] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2009.247434] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2009.255125] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2009.262379] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 [ 2009.269632] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2009.276884] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2009.284150] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:27 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) r6 = syz_open_dev$dspn(&(0x7f00000002c0)='/dev/dsp#\x00', 0x3, 0x2000) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {r6, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:27 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/sync_threshold\x00', 0x2, 0x0) sendto$inet(r2, &(0x7f0000000040)="1de4340a59107c26da914e", 0xb, 0x24000011, 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r3, r1, 0x0) 18:11:27 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8000a0ffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:27 executing program 2 (fault-call:5 fault-nth:4): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2011.196317] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2011.230137] FAULT_INJECTION: forcing a failure. [ 2011.230137] name failslab, interval 1, probability 0, space 0, times 0 [ 2011.265396] CPU: 0 PID: 13813 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2011.272537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2011.281896] Call Trace: [ 2011.284504] dump_stack+0x1db/0x2d0 [ 2011.288161] ? dump_stack_print_info.cold+0x20/0x20 [ 2011.293217] should_fail.cold+0xa/0x15 [ 2011.297131] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2011.302264] ? ___might_sleep+0x1e7/0x310 [ 2011.306426] ? pud_huge+0xbe/0x120 [ 2011.309979] ? arch_local_save_flags+0x50/0x50 18:11:28 executing program 1: socketpair$unix(0x1, 0x7, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) get_thread_area(&(0x7f0000000000)={0x8, 0x20001000, 0x4000, 0x4000400, 0x8000000000000007, 0x40, 0x8, 0x7, 0x3, 0xffffffff7fffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:11:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x8001a0ffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:28 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) getpeername(0xffffffffffffff9c, &(0x7f0000000200)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, &(0x7f0000000280)=0x80) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {r5, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2011.314589] __should_failslab+0x121/0x190 [ 2011.318843] should_failslab+0x9/0x14 [ 2011.322677] __kmalloc+0x2dc/0x740 [ 2011.326258] ? ext4_find_extent+0x76e/0x9d0 [ 2011.330605] ext4_find_extent+0x76e/0x9d0 [ 2011.334782] ext4_ext_map_blocks+0x261/0x60a0 [ 2011.339296] ? debug_smp_processor_id+0x1c/0x20 [ 2011.343986] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2011.348951] ? ext4_ext_release+0x10/0x10 [ 2011.353138] ? check_preemption_disabled+0x48/0x290 [ 2011.358167] ? __lock_is_held+0xb6/0x140 [ 2011.362268] ? lock_acquire+0x1db/0x570 [ 2011.366257] ? ext4_map_blocks+0x496/0x1bb0 [ 2011.370598] ? ___might_sleep+0x1e7/0x310 [ 2011.374767] ? lock_release+0xc40/0xc40 [ 2011.378780] ? down_read+0x8d/0x120 [ 2011.381369] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2011.382416] ? ext4_map_blocks+0x496/0x1bb0 [ 2011.396102] ? __down_interruptible+0x740/0x740 [ 2011.396122] ? __lock_is_held+0xb6/0x140 [ 2011.396148] ext4_map_blocks+0xf90/0x1bb0 [ 2011.396174] ? ext4_issue_zeroout+0x170/0x170 18:11:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) dup3(r0, r0, 0xfffffffffffefffe) 18:11:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0ffffffffffff, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2011.396197] ? __might_sleep+0x95/0x190 [ 2011.396217] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.396235] _ext4_get_block+0x245/0x7a0 [ 2011.396248] ? __lock_is_held+0xb6/0x140 [ 2011.396266] ? ext4_map_blocks+0x1bb0/0x1bb0 [ 2011.396285] ? iov_iter_get_pages+0x34c/0x1290 [ 2011.396305] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.396322] ? ext4_meta_trans_blocks+0x25c/0x310 [ 2011.396341] ext4_get_block_trans+0x1a7/0x2e0 [ 2011.396361] ? ext4_dio_get_block_overwrite+0xf0/0xf0 [ 2011.396378] ? iov_iter_npages+0xf20/0xf20 [ 2011.396393] ? rcu_read_lock_sched_held+0x110/0x130 [ 2011.396415] ext4_dio_get_block_unwritten_async+0x70/0x260 [ 2011.396437] do_blockdev_direct_IO+0x3822/0xdc10 [ 2011.396453] ? print_usage_bug+0xd0/0xd0 [ 2011.396485] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.396531] ? sb_init_dio_done_wq+0x90/0x90 [ 2011.396554] ? ___might_sleep+0x1e7/0x310 [ 2011.396585] ? __might_sleep+0x95/0x190 [ 2011.396606] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2011.396640] ? __find_get_block+0xf20/0xf20 [ 2011.396657] ? mark_held_locks+0x100/0x100 18:11:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='memory.current\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x41, &(0x7f0000000040)={'filter\x00', 0x4, [{}, {}, {}, {}]}, 0x68) r2 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000100)='/dev/qat_adf_ctl\x00', 0x10000, 0x0) dup3(r3, r2, 0x0) [ 2011.396675] ? check_preemption_disabled+0x48/0x290 [ 2011.396693] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.396711] ? print_usage_bug+0xd0/0xd0 [ 2011.396731] ? debug_smp_processor_id+0x1c/0x20 [ 2011.396746] ? perf_trace_lock+0x12f/0x750 [ 2011.396763] ? debug_smp_processor_id+0x1c/0x20 [ 2011.396778] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2011.396800] ? __lock_acquire+0x572/0x4a30 [ 2011.396816] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2011.396831] ? __ext4_get_inode_loc+0x463/0x1340 [ 2011.396845] ? perf_trace_lock+0x750/0x750 [ 2011.396879] ? mark_held_locks+0x100/0x100 [ 2011.396900] ? __brelse+0x105/0x180 [ 2011.396918] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.396936] ? check_preemption_disabled+0x48/0x290 [ 2011.396961] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2011.506305] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2011.507450] ? invalidate_inode_pages2_range+0x159f/0x1d10 [ 2011.507483] ? add_lock_to_list.isra.0+0x450/0x450 [ 2011.507503] ? pagecache_isize_extended+0x430/0x430 [ 2011.507521] ? kasan_check_write+0x14/0x20 [ 2011.616044] ? print_usage_bug+0xd0/0xd0 [ 2011.624319] ? down_read+0x8d/0x120 [ 2011.624337] ? up_read_non_owner+0x100/0x100 [ 2011.632356] ? current_time+0x6e/0x1b0 [ 2011.636261] ? find_held_lock+0x35/0x120 [ 2011.640334] ? add_lock_to_list.isra.0+0x450/0x450 [ 2011.640354] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.640370] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.640389] ? check_preemption_disabled+0x48/0x290 [ 2011.640419] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2011.650872] __blockdev_direct_IO+0xa1/0xca [ 2011.650894] ? write_end_fn+0xf0/0xf0 [ 2011.650916] ext4_direct_IO+0x10a3/0x2090 [ 2011.650934] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2011.650963] ? ext4_iomap_end+0x7e0/0x7e0 [ 2011.661503] ? timespec64_trunc+0x180/0x180 [ 2011.661526] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2011.661542] ? file_remove_privs+0x213/0x500 [ 2011.661561] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2011.661579] ? filemap_check_errors+0xd8/0x110 [ 2011.670575] generic_file_direct_write+0x214/0x4b0 [ 2011.670608] __generic_file_write_iter+0x2ee/0x630 [ 2011.670638] ext4_file_write_iter+0x37a/0x1410 [ 2011.670669] ? ext4_file_mmap+0x410/0x410 [ 2011.678590] ? aio_write+0x501/0x640 [ 2011.678623] ? lock_downgrade+0x910/0x910 [ 2011.678653] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2011.678670] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2011.687473] ? __sb_start_write+0x1ac/0x360 [ 2011.687497] aio_write+0x3ba/0x640 [ 2011.687521] ? aio_read+0x4c0/0x4c0 [ 2011.687535] ? find_held_lock+0x35/0x120 [ 2011.687555] ? __might_fault+0x12b/0x1e0 [ 2011.687589] ? lock_release+0xc40/0xc40 [ 2011.697444] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2011.697486] io_submit_one+0xbd4/0x1050 [ 2011.697513] ? aio_poll+0x14e0/0x14e0 [ 2011.707453] ? lock_downgrade+0x910/0x910 [ 2011.707504] __x64_sys_io_submit+0x1c4/0x5d0 [ 2011.707528] ? __ia32_sys_io_destroy+0x590/0x590 [ 2011.707546] ? do_syscall_64+0x8c/0x800 [ 2011.707568] ? trace_hardirqs_on+0xbd/0x310 [ 2011.717060] ? __ia32_sys_read+0xb0/0xb0 [ 2011.717098] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2011.717117] ? trace_hardirqs_off_caller+0x300/0x300 [ 2011.717133] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2011.717150] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2011.717177] do_syscall_64+0x1a3/0x800 [ 2011.726681] ? __ia32_sys_io_destroy+0x590/0x590 [ 2011.726698] ? do_syscall_64+0x1a3/0x800 [ 2011.726722] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2011.726742] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2011.726769] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2011.726801] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2011.734636] RIP: 0033:0x458099 [ 2011.734653] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2011.734677] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2011.734693] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2011.734718] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 [ 2011.734743] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2011.734753] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2011.734764] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:30 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$PERF_EVENT_IOC_ENABLE(r0, 0x8912, 0x400200) pkey_alloc(0x0, 0x1) r1 = openat$uhid(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/uhid\x00', 0x0, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) dup3(r2, r1, 0x0) 18:11:30 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:30 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x100000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:30 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:30 executing program 2 (fault-call:5 fault-nth:5): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:30 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) r4 = openat$apparmor_task_current(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/self/attr/current\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {r4, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) [ 2014.258720] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2014.325499] FAULT_INJECTION: forcing a failure. [ 2014.325499] name failslab, interval 1, probability 0, space 0, times 0 [ 2014.337351] CPU: 1 PID: 13855 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2014.344470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2014.353827] Call Trace: [ 2014.356453] dump_stack+0x1db/0x2d0 [ 2014.360149] ? dump_stack_print_info.cold+0x20/0x20 [ 2014.365272] ? is_bpf_text_address+0xac/0x170 [ 2014.369824] should_fail.cold+0xa/0x15 [ 2014.373784] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2014.378899] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.378927] ? debug_smp_processor_id+0x1c/0x20 [ 2014.378950] ? debug_smp_processor_id+0x1c/0x20 [ 2014.378980] __should_failslab+0x121/0x190 [ 2014.379002] should_failslab+0x9/0x14 [ 2014.379019] kmem_cache_alloc+0x47/0x710 [ 2014.379036] ? __es_remove_extent+0x871/0xb30 [ 2014.379067] __es_insert_extent+0x366/0x1190 [ 2014.379107] ? ext4_es_free_extent+0x770/0x770 [ 2014.419494] ? do_raw_read_unlock+0x70/0x70 [ 2014.423824] ? __lock_is_held+0xb6/0x140 [ 2014.423865] ext4_es_insert_extent+0x369/0xc80 [ 2014.423896] ? ext4_es_scan_clu+0x50/0x50 [ 2014.423916] ? ext4_es_init_tree+0x70/0x70 [ 2014.440993] ext4_ext_put_gap_in_cache+0x176/0x200 [ 2014.445944] ? ext4_rereserve_cluster+0x240/0x240 [ 2014.450801] ? ext4_find_extent+0x76e/0x9d0 [ 2014.455135] ? ext4_find_extent+0x6a6/0x9d0 [ 2014.455168] ext4_ext_map_blocks+0x2ab8/0x60a0 [ 2014.455190] ? debug_smp_processor_id+0x1c/0x20 [ 2014.455227] ? ext4_ext_release+0x10/0x10 [ 2014.455244] ? check_preemption_disabled+0x48/0x290 [ 2014.455266] ? __lock_is_held+0xb6/0x140 [ 2014.455293] ? lock_acquire+0x1db/0x570 [ 2014.455308] ? ext4_map_blocks+0x496/0x1bb0 [ 2014.455326] ? ___might_sleep+0x1e7/0x310 [ 2014.494506] ? lock_release+0xc40/0xc40 [ 2014.498518] ? down_read+0x8d/0x120 [ 2014.502157] ? ext4_map_blocks+0x496/0x1bb0 [ 2014.506491] ? __down_interruptible+0x740/0x740 [ 2014.511202] ? __lock_is_held+0xb6/0x140 [ 2014.515285] ext4_map_blocks+0xf90/0x1bb0 [ 2014.519456] ? ext4_issue_zeroout+0x170/0x170 [ 2014.523980] ? __might_sleep+0x95/0x190 [ 2014.527965] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.533519] _ext4_get_block+0x245/0x7a0 [ 2014.537591] ? __lock_is_held+0xb6/0x140 [ 2014.541702] ? ext4_map_blocks+0x1bb0/0x1bb0 [ 2014.546123] ? iov_iter_get_pages+0x34c/0x1290 [ 2014.550722] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.556275] ? ext4_meta_trans_blocks+0x25c/0x310 [ 2014.561137] ext4_get_block_trans+0x1a7/0x2e0 [ 2014.565651] ? ext4_dio_get_block_overwrite+0xf0/0xf0 [ 2014.570855] ? iov_iter_npages+0xf20/0xf20 18:11:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:31 executing program 1 (fault-call:2 fault-nth:0): r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2014.575104] ? rcu_read_lock_sched_held+0x110/0x130 [ 2014.575130] ext4_dio_get_block_unwritten_async+0x70/0x260 [ 2014.575172] do_blockdev_direct_IO+0x3822/0xdc10 [ 2014.575192] ? __lock_acquire+0x572/0x4a30 [ 2014.575264] ? sb_init_dio_done_wq+0x90/0x90 [ 2014.599237] ? __lock_is_held+0xb6/0x140 [ 2014.603348] ? arch_local_save_flags+0x50/0x50 [ 2014.607998] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2014.612694] ? __ext4_handle_dirty_metadata+0x1e3/0x570 [ 2014.618092] ? kasan_check_write+0x14/0x20 [ 2014.622341] ? ext4_mark_iloc_dirty+0x1947/0x2f00 18:11:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:31 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) r3 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {r3, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) [ 2014.627221] ? ext4_chunk_trans_blocks+0x30/0x30 [ 2014.631999] ? __might_sleep+0x95/0x190 [ 2014.635998] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2014.641551] ? __ext4_journal_get_write_access+0x70/0xa0 [ 2014.647026] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.652595] ? ext4_mark_inode_dirty+0x257/0xb80 [ 2014.657370] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2014.662920] ? invalidate_inode_pages2_range+0x159f/0x1d10 [ 2014.668560] ? add_lock_to_list.isra.0+0x450/0x450 [ 2014.673517] ? pagecache_isize_extended+0x430/0x430 [ 2014.678550] ? __lock_is_held+0xb6/0x140 [ 2014.682649] ? add_lock_to_list.isra.0+0x450/0x450 [ 2014.687600] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.693151] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.698704] ? check_preemption_disabled+0x48/0x290 [ 2014.703754] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2014.708441] __blockdev_direct_IO+0xa1/0xca [ 2014.712785] ? write_end_fn+0xf0/0xf0 [ 2014.716620] ext4_direct_IO+0x10a3/0x2090 [ 2014.720841] ? ext4_get_block_trans+0x2e0/0x2e0 18:11:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x200000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2014.725592] ? ext4_iomap_end+0x7e0/0x7e0 [ 2014.729757] ? generic_update_time+0x268/0x440 [ 2014.734366] ? file_remove_privs+0x500/0x500 [ 2014.738791] ? preempt_count_add+0xbc/0x1b0 [ 2014.743126] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.748678] ? preempt_count_add+0xbc/0x1b0 [ 2014.753017] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.759348] ? __mnt_drop_write+0x5d/0x80 [ 2014.759368] ? __mnt_drop_write_file+0x31/0x40 18:11:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2014.759384] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2014.759402] ? filemap_check_errors+0xd8/0x110 [ 2014.759432] generic_file_direct_write+0x214/0x4b0 [ 2014.759464] __generic_file_write_iter+0x2ee/0x630 [ 2014.759493] ext4_file_write_iter+0x37a/0x1410 [ 2014.759525] ? ext4_file_mmap+0x410/0x410 [ 2014.759542] ? aio_write+0x501/0x640 [ 2014.759572] ? lock_downgrade+0x910/0x910 [ 2014.759612] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2014.759628] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2014.759643] ? __sb_start_write+0x1ac/0x360 [ 2014.759665] aio_write+0x3ba/0x640 [ 2014.759689] ? aio_read+0x4c0/0x4c0 [ 2014.759703] ? find_held_lock+0x35/0x120 [ 2014.759722] ? __might_fault+0x12b/0x1e0 [ 2014.759756] ? lock_release+0xc40/0xc40 [ 2014.759778] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2014.759817] io_submit_one+0xbd4/0x1050 [ 2014.759841] ? aio_poll+0x14e0/0x14e0 [ 2014.759867] ? lock_downgrade+0x910/0x910 [ 2014.759916] __x64_sys_io_submit+0x1c4/0x5d0 [ 2014.759939] ? __ia32_sys_io_destroy+0x590/0x590 [ 2014.759958] ? do_syscall_64+0x8c/0x800 [ 2014.759980] ? trace_hardirqs_on+0xbd/0x310 [ 2014.759995] ? __ia32_sys_read+0xb0/0xb0 [ 2014.760016] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.760033] ? trace_hardirqs_off_caller+0x300/0x300 [ 2014.760048] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2014.760065] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 2014.760104] do_syscall_64+0x1a3/0x800 [ 2014.760120] ? __ia32_sys_io_destroy+0x590/0x590 [ 2014.760135] ? do_syscall_64+0x1a3/0x800 [ 2014.760157] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2014.760177] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2014.760203] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2014.760232] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2014.760246] RIP: 0033:0x458099 [ 2014.760263] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2014.760272] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2014.760289] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2014.760300] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 [ 2014.760310] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2014.760319] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2014.760329] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 [ 2014.885234] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:33 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:33 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x2, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:33 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x300000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:33 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:33 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {0xffffffffffffffff, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:33 executing program 2 (fault-call:5 fault-nth:6): r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2017.395924] FAULT_INJECTION: forcing a failure. [ 2017.395924] name failslab, interval 1, probability 0, space 0, times 0 [ 2017.400931] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:34 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {0xffffffffffffffff, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) [ 2017.454154] CPU: 1 PID: 13895 Comm: syz-executor2 Not tainted 5.0.0-rc3 #36 [ 2017.461287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2017.470643] Call Trace: [ 2017.473256] dump_stack+0x1db/0x2d0 [ 2017.476912] ? dump_stack_print_info.cold+0x20/0x20 [ 2017.481958] should_fail.cold+0xa/0x15 [ 2017.485878] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2017.491009] ? ___might_sleep+0x1e7/0x310 [ 2017.495182] ? arch_local_save_flags+0x50/0x50 [ 2017.499796] __should_failslab+0x121/0x190 18:11:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x400000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2017.504047] should_failslab+0x9/0x14 [ 2017.507885] __kmalloc+0x2dc/0x740 [ 2017.511466] ? ext4_find_extent+0x76e/0x9d0 [ 2017.515806] ext4_find_extent+0x76e/0x9d0 [ 2017.519982] ext4_ext_map_blocks+0x261/0x60a0 [ 2017.524527] ? debug_smp_processor_id+0x1c/0x20 [ 2017.529210] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2017.534174] ? ext4_ext_release+0x10/0x10 [ 2017.538339] ? __lock_is_held+0xb6/0x140 [ 2017.542431] ? lock_acquire+0x1db/0x570 [ 2017.546420] ? ext4_map_blocks+0x949/0x1bb0 [ 2017.550752] ? ___might_sleep+0x1e7/0x310 [ 2017.554921] ? lock_release+0xc40/0xc40 [ 2017.558929] ? down_write+0x8a/0x130 [ 2017.562656] ? ext4_map_blocks+0x949/0x1bb0 [ 2017.566983] ? down_read+0x120/0x120 [ 2017.567000] ? __lock_is_held+0xb6/0x140 [ 2017.567026] ext4_map_blocks+0x9b1/0x1bb0 [ 2017.567056] ? ext4_issue_zeroout+0x170/0x170 [ 2017.567092] ? __might_sleep+0x95/0x190 [ 2017.567113] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.593009] _ext4_get_block+0x245/0x7a0 [ 2017.597112] ? __lock_is_held+0xb6/0x140 [ 2017.597135] ? ext4_map_blocks+0x1bb0/0x1bb0 [ 2017.597162] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.597181] ? ext4_meta_trans_blocks+0x25c/0x310 [ 2017.616007] ext4_get_block_trans+0x1a7/0x2e0 [ 2017.620525] ? ext4_dio_get_block_overwrite+0xf0/0xf0 [ 2017.625740] ? iov_iter_npages+0xf20/0xf20 [ 2017.629988] ? rcu_read_lock_sched_held+0x110/0x130 [ 2017.635035] ext4_dio_get_block_unwritten_async+0x70/0x260 [ 2017.640694] do_blockdev_direct_IO+0x3822/0xdc10 [ 2017.645471] ? print_usage_bug+0xd0/0xd0 [ 2017.649567] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.655250] ? sb_init_dio_done_wq+0x90/0x90 [ 2017.659686] ? ___might_sleep+0x1e7/0x310 [ 2017.663871] ? __might_sleep+0x95/0x190 [ 2017.667870] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2017.672353] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2017.672565] ? __find_get_block+0xf20/0xf20 [ 2017.685353] ? mark_held_locks+0x100/0x100 [ 2017.689607] ? check_preemption_disabled+0x48/0x290 [ 2017.694646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.700201] ? print_usage_bug+0xd0/0xd0 18:11:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x4b47, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2017.704279] ? debug_smp_processor_id+0x1c/0x20 [ 2017.708955] ? perf_trace_lock+0x12f/0x750 [ 2017.713201] ? debug_smp_processor_id+0x1c/0x20 [ 2017.717878] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2017.722831] ? __lock_acquire+0x572/0x4a30 [ 2017.727089] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2017.732636] ? __ext4_get_inode_loc+0x463/0x1340 [ 2017.737404] ? perf_trace_lock+0x750/0x750 [ 2017.741669] ? mark_held_locks+0x100/0x100 [ 2017.745931] ? __brelse+0x105/0x180 [ 2017.749577] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 18:11:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x500000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2017.755143] ? check_preemption_disabled+0x48/0x290 [ 2017.760178] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2017.765735] ? invalidate_inode_pages2_range+0x159f/0x1d10 [ 2017.771382] ? add_lock_to_list.isra.0+0x450/0x450 [ 2017.776327] ? pagecache_isize_extended+0x430/0x430 [ 2017.781359] ? kasan_check_write+0x14/0x20 [ 2017.785622] ? print_usage_bug+0xd0/0xd0 [ 2017.789698] ? down_read+0x8d/0x120 [ 2017.793337] ? up_read_non_owner+0x100/0x100 [ 2017.797759] ? current_time+0x6e/0x1b0 [ 2017.801660] ? find_held_lock+0x35/0x120 [ 2017.805738] ? add_lock_to_list.isra.0+0x450/0x450 [ 2017.805757] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.805772] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.805791] ? check_preemption_disabled+0x48/0x290 [ 2017.805824] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2017.805846] __blockdev_direct_IO+0xa1/0xca [ 2017.805865] ? write_end_fn+0xf0/0xf0 [ 2017.816326] ext4_direct_IO+0x10a3/0x2090 [ 2017.816346] ? ext4_get_block_trans+0x2e0/0x2e0 [ 2017.816378] ? ext4_iomap_end+0x7e0/0x7e0 [ 2017.816401] ? timespec64_trunc+0x180/0x180 [ 2017.816422] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2017.816436] ? file_remove_privs+0x213/0x500 [ 2017.816456] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2017.816473] ? filemap_check_errors+0xd8/0x110 [ 2017.816500] generic_file_direct_write+0x214/0x4b0 [ 2017.882025] __generic_file_write_iter+0x2ee/0x630 [ 2017.886988] ext4_file_write_iter+0x37a/0x1410 [ 2017.891608] ? ext4_file_mmap+0x410/0x410 [ 2017.895771] ? aio_write+0x501/0x640 [ 2017.899508] ? lock_downgrade+0x910/0x910 [ 2017.903681] ? rcu_sync_lockdep_assert+0x73/0xb0 [ 2017.908451] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2017.910154] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2017.913993] ? __sb_start_write+0x1ac/0x360 [ 2017.914019] aio_write+0x3ba/0x640 [ 2017.914044] ? aio_read+0x4c0/0x4c0 [ 2017.914058] ? find_held_lock+0x35/0x120 [ 2017.914086] ? __might_fault+0x12b/0x1e0 [ 2017.914117] ? lock_release+0xc40/0xc40 [ 2017.946306] ? rcu_dynticks_curr_cpu_in_eqs+0xa2/0x170 [ 2017.951624] io_submit_one+0xbd4/0x1050 [ 2017.955633] ? aio_poll+0x14e0/0x14e0 [ 2017.959460] ? lock_downgrade+0x910/0x910 [ 2017.963666] __x64_sys_io_submit+0x1c4/0x5d0 [ 2017.968105] ? __ia32_sys_io_destroy+0x590/0x590 [ 2017.972880] ? do_syscall_64+0x8c/0x800 [ 2017.976878] ? trace_hardirqs_on+0xbd/0x310 [ 2017.981219] ? __ia32_sys_read+0xb0/0xb0 [ 2017.985294] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2017.990671] ? trace_hardirqs_off_caller+0x300/0x300 [ 2017.995788] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2018.001338] ? trace_hardirqs_on_thunk+0x1a/0x1c 18:11:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x600000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2018.006126] do_syscall_64+0x1a3/0x800 [ 2018.010523] ? __ia32_sys_io_destroy+0x590/0x590 [ 2018.015294] ? do_syscall_64+0x1a3/0x800 [ 2018.019373] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2018.024320] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2018.029366] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2018.034239] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2018.039441] RIP: 0033:0x458099 [ 2018.042647] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2018.061559] RSP: 002b:00007fe80e413c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2018.069283] RAX: ffffffffffffffda RBX: 00007fe80e413c90 RCX: 0000000000458099 [ 2018.076562] RDX: 0000000020000540 RSI: 0000000000000008 RDI: 00007fe80e3f3000 [ 2018.083844] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2018.091122] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fe80e4146d4 [ 2018.098401] R13: 00000000004bf2cb R14: 00000000004d0a18 R15: 0000000000000005 18:11:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2018.109653] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x4b49, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:37 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140)='/dev/kvm\x00', 0x2000, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {r2, 0x3001}, {0xffffffffffffffff, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x700000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:37 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2020.475149] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x541b, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:37 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {r1, 0xc1}, {0xffffffffffffffff, 0x3001}, {r2, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x800000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x5421, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2020.766636] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:40 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xa00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x5450, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2023.554227] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x5451, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xd04000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x5, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x5452, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2023.840257] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2023.887266] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xe00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x5460, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xa, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:43 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2026.666173] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40049409, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xd, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2026.883439] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40086602, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x1000000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2027.095897] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40087602, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xf, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x2000000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:46 executing program 5: r0 = syz_open_dev$rtc(&(0x7f0000000040)='/dev/rtc#\x00', 0x800, 0x6000) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2029.760388] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4800000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x4020940d, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x10, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2029.922617] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x4c00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2030.112448] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x404c534a, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6000000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x18, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x100, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) [ 2032.834611] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505330, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6800000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:49 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x28, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40505331, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2033.051660] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2033.084038] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x6c00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:11:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x4058534c, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x30, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:52 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x10000006, [0x0, 0x0, 0x1f000000]}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000080)={0xffffffffffffff9c}) connect$pptp(r1, &(0x7f0000000140)={0x18, 0x2, {0x1, @empty}}, 0x1e) write$binfmt_misc(r1, &(0x7f0000000340)=ANY=[@ANYBLOB="73797a3119c8e7016cadd1caeaadf063ab790797c67dcba5342d2b068aeebc8a96bd5aad069c3da1174976d86370545b8a2a00430ab9e80078f53eea40538796c9b81e9f9bf537d71757ea15b40fd68c0532b2daab0657ea59a7a0a50cc7164567977bc51d583784e1343ad9bf5d45406b5cc3ce317560c47d6d60da32e8e3efb4ffe6cfff4096f7f0b1b4068fd660f01681537c8d2c955e00ff376d664b4556e23975e8fed648a6883a491c18de73aac07a8d54c65da1ebcf8fd34d300ceabaa6428ab206d4c40332667a73b5e1f6d316d89bd54363e6aa83eed70000000000000000000000000000641c3a843ce7682d0ec0bdff8ccc990a"], 0xe9) r2 = syz_open_dev$usb(&(0x7f0000000040)='/dev/bus/usb/00#/00#\x00', 0x1580, 0x1) gettid() ioctl$EVIOCGRAB(r2, 0x40044590, &(0x7f0000000180)=0x20) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2035.882481] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85321, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7400000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x38, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0xea80, 0x0, 'queue0\x00', 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) prctl$PR_SET_KEEPCAPS(0x8, 0x1) gettid() r1 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000080)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ID(r1, 0x80082407, &(0x7f0000000140)) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2036.088290] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2036.125267] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40a85323, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2036.231744] QAT: Invalid ioctl [ 2036.293634] QAT: Invalid ioctl 18:11:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x7a00000000000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:55 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x48, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x40bc5311, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:55 executing program 0: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xb5, 0x10000) r1 = msgget$private(0x0, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) r5 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000600)={{0x3, r2, r3, r4, r5, 0x10, 0x3}, 0xffffffffffffffff, 0x3, 0xa0, 0x1ff, 0x4, 0x1, r6, r7}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x71f0, 0x0, 0xdef, 0x7fff}, {0x3ff, 0xfffffffffffffff8, 0x3, 0x4}, {0x6, 0x3f, 0x5, 0xfffffffffffffffc}, {0x5, 0x401, 0x6, 0x8001}, {0x3f, 0x1, 0x2d2b30cd, 0x7cc1}]}) r8 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x121}}], 0x1, 0x0) r9 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r11, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x3ff, @mcast2, 0x1a}, {0xa, 0x4e22, 0xffffffff80000000, @empty, 0xf0000}, 0x9, [0x5, 0x5, 0x2000000, 0x0, 0x0, 0x8000, 0x1, 0x3]}, 0x5c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0xb}}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000006c0)={'rose0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r11, 0xc0305710, &(0x7f0000000280)={0x1, 0xac, 0x1, 0xffffffffffffffff}) sendmsg$nl_generic(r12, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x1520010000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008001100e2abb4004906b24d3dd4d7071b9b1bda3adc4b443651f765968f1af519200ec376b85a3f97eb22c5ce8f1bf6a9f85bbd0c5d5b23d3d10ae3a85ecf7b81af5bc36a535577deeaaa6a51b870ba264714f3c5201d68b7764f11bc924d213d13959c05f1a227666c76a7d927b11b345429a72ac564c966800ee658ccd0e763b1ebed27deda52541e87c0425854c1760cd101b680fe8ecc13e6c606d1505c2fadb270ffbd15f180144cd8baebf82687b04b3c70eaf6b84be099d7e1db045d8a5b1b358a1ce316481755d4901fc95851eae41dd83d88963f"], 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r13 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000680)={0x0, 0xffffffff, 0x2000000000000004, @tid=r13}, &(0x7f0000000700)=0x0) timer_delete(r14) 18:11:55 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) [ 2038.948544] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x80045300, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x9effffff00000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:55 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x50, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2039.176215] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xf0ffffff00000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x80045301, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2039.341008] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:56 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffff7f00000000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2039.516148] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:11:58 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x58, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x80086601, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:58 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffffffa0008000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:58 executing program 0: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffff7fffffffff0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) bind$rose(r1, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x0, 0x7, 0xfff, 0x8, 0x8}, &(0x7f0000000080)=0x98) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000003c0)={0xf006, "824cbb5d3a2968c43a948e8f3874b486071592fefb156190bba320a35f07389c", 0x1, 0x1}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x20, 0x2, 0x7}, &(0x7f0000000300)=0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @empty, 0x1000}}, 0x24) [ 2042.035798] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:11:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x80087601, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:11:58 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() syz_mount_image$nfs(&(0x7f0000000040)='nfs\x00', &(0x7f0000000080)='./file0\x00', 0x2, 0x1, &(0x7f0000000140)=[{&(0x7f0000000240)="4551f6ccd1829c38a0ad83996e624f5e733e987d4cb22de4dd80793c1b17b87dde6894740488be5ed1b33b28467df76db0e55568a4c1be3a2ab311bea9393d7793e564b9b95249ad2c18e43a8344b0a9d49c73559d2a2ec74d33d10792162bea4a6469980228a0c0452689e1f5b12771d67db970d9249d5f2ea2f4ee8cc221153d230152e453c8db012f08dd983e23d4f0b76b1bba29445ba786bc859e760bdf9fbf9a9528ec133880bed31368492cb70d", 0xb1, 0x9}], 0xfdad4e53f11f5b87, &(0x7f0000000300)='cpuset\x00') r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000340)='/selinux/avc/cache_stats\x00', 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000380)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ioctl$VIDIOC_G_CROP(r1, 0xc014563b, &(0x7f00000003c0)={0x7, {0xfffffffffffffffb, 0x0, 0x4b4, 0x1ff}}) 18:11:58 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:11:58 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xffffffffa0018000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:11:58 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x60, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:11:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2042.283207] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2042.301110] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:01 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0xfffffffffffff000, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:12:01 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x68, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0xfffffffffffffffc, 0x0, 0x0, 'queue0\x00', 0x3}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000300)='/dev/autofs\x00', 0x0, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_MBUS_CODE(r1, 0xc0305602, &(0x7f0000000340)={0x0, 0xdf, 0x0, 0x1}) r2 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r3 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/commit_pending_bools\x00', 0x1, 0x0) ioctl$LOOP_SET_FD(r1, 0x4c00, r1) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x2000000, 0x30, r1, 0x0) ioctl$VIDIOC_SUBDEV_S_EDID(r3, 0xc0285629, &(0x7f0000000280)={0x0, 0x4aa328ab, 0x200, [], &(0x7f0000000240)=0x4}) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f00000002c0)=r2) r4 = accept4$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x2711, @reserved}, 0x2841740bff31f72f, 0x80800) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r4, 0x28, 0x0, &(0x7f0000000080)=0x7c, 0x8) tkill(0x0, 0x0) 18:12:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0045878, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2045.123311] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:01 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, 0x0, 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}, {0xffffffffffffffff, 0x8000}], 0x9, 0xefa) 18:12:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0105303, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:01 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:01 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x4000) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180)='/dev/fuse\x00', 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000300)='fuse\x00', 0x0, &(0x7f0000000400)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {'user_id'}, 0x2c, {'group_id'}}) read$FUSE(r1, &(0x7f00000040c0), 0x1000) read$FUSE(r1, &(0x7f0000002000), 0x46d) chdir(&(0x7f0000000480)='./file0\x00') write$FUSE_INTERRUPT(r1, &(0x7f0000000240)={0x10, 0x0, 0x2}, 0x10) write$FUSE_DIRENTPLUS(r1, &(0x7f0000000840)={0x10, 0x0, 0x4}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x70, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0189436, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2045.335046] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:04 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:04 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(0x0, 0x0, 0xefa) 18:12:04 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r1 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r1, 0x0, 0x61, &(0x7f0000000240)=ANY=[@ANYBLOB="66696c7465720000000000000000000000000000000000000000000000000000db020000899c38cc319e566d53c2cc440a787684f6f7f60aa712331f92bdf64071bd14af04574e1dbce4504d680c180d8f61a05974051837eaed17c1ee4af8d0499b8fcf57bd618ec5f4ef6131b0ac7e7516bfb2eec9e10065c2b73d10ba19cbb23161e3fff89df61fc3c1624e48c159c468d1c131e6b702dfea8f54e5c00e79176bdc90ca2b05b452c42bd023b98f74157cd6b31b3952dcb4ba74e29d9d884111d37c4c3efd9298c8f8d2e082e8f41271c137b68afbd301844356d2d4287b35b2fde0a6bf5122ac5a1c0b6030affeb95352e7ac5904722fb7"], &(0x7f0000000080)=0xfffffffffffffe3f) 18:12:04 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x78, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc020660b, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:04 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x2, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2048.216410] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:04 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0305302, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:04 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x88, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:05 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x20000000000000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f0000000240)={0x3, 0x2, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_settime(0x0, 0x0, 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x200, 0x0) tkill(0x0, 0x0) 18:12:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc08c5332, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2048.447937] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2048.473480] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:07 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:07 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x10000, 0x0) write$FUSE_IOCTL(r1, &(0x7f0000000080)={0x20, 0x0, 0x8, {0x139, 0x4, 0x4, 0x8}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:07 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:07 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0a85320, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:07 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x90, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:07 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(0x0, 0x0, 0xefa) [ 2051.332905] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0a85322, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x31) 18:12:08 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:08 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x98, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0bc5310, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2051.631946] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:08 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x0, 0x2) ioctl$SNDRV_TIMER_IOCTL_STOP(r1, 0x54a1) ioctl$sock_inet6_tcp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xa0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x1f00, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000640)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = openat$zero(0xffffffffffffff9c, &(0x7f0000000080)='/dev/zero\x00', 0x4002, 0x0) ioctl$KVM_GET_LAPIC(r1, 0x8400ae8e, &(0x7f0000000240)={"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"}) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f00000000c0)={0x4, 0x1, [{0x9}, {0xf0, 0x0, 0x10001}, {0x3, 0x0, 0x80000001}, {0x5, 0x0, 0x3}]}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f0000000680)={0x0, 0x0, 0xfffffffffffffffd, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r2 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x101000, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) ioctl$CAPI_GET_PROFILE(r2, 0xc0404309, &(0x7f0000000140)=0x1000) ioctl$KVM_NMI(r1, 0xae9a) timer_create(0x0, &(0x7f0000000000)={0x0, 0x40, 0x5, @thr={&(0x7f0000000700)="d944e2284e0929508298053ad1d60b268483a017a4197c3b0b4fc6bd8532a9623a0bb0bfe3851bdd00819a3d20129bccb1f774340833a6d4eb0fb74684cd66f2524607d9", &(0x7f0000000780)="625a68621550ca72049191da48736b7d65e8e27ea08bfb18fbd5d0ef0d43deb65972ed6661bbe8249fdc50e82d62eda71532c14ed66f88deaa9a718c24488d3b427aeab4f0816142b923b65944d91d10536f16ca522d6fa774e6e1606730"}}, &(0x7f0000000800)=0x0) socket$nl_xfrm(0x10, 0x3, 0x6) timer_create(0x5, &(0x7f0000000940)={0x0, 0x19, 0x4, @thr={&(0x7f0000000840)="676c03bcd1ea2e9427a0be701d39a0444167b11d740a7decff3d4982ce5c741751fd5d95f1878f7f765375389e2e7e98a89524227423118604cee4eaca01d4c516ca6b7503b830b9637f0275be62f3f95ceedec6860bb5e21b2c7ed00aef2423cbdfe6c1c22c07a6ede7a235796c6a870cad7ccf7a62328e4ebb14c1c5880eda47dc65b819313a12c0e881a91d16e7f72f99e47cc8abe7c21147efb0e09177d037befbd29aa8dacc31bdde2a59fd65bf509349c1f368", &(0x7f0000000900)="dcf90047267f0994"}}, &(0x7f0000000980)) timer_create(0x7, &(0x7f0000000a80)={0x0, 0x27, 0x4, @thr={&(0x7f00000009c0)="ee14a4eaf5700d3f3e4c6504ad35046c3f707cbab395727ba84668480ba5194c712426d7e657", &(0x7f0000000a00)="0fbe793a5f62196c55bac91022c723525f584196b84a65b0c3af1c88a687697c367ecd3a2c46ccc3de34daf2b48e6d2d8ddae52a5fb998517de3d86ce177e0d97b34e442c7f6ae9cc913c1095756cdaf6634efa67f9f6c0ab8ff4cfa3c0a56a856c965504840"}}, &(0x7f0000000ac0)) timer_settime(r3, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:11 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(0x0, 0x0, 0xefa) 18:12:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x8000a0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2054.436510] Unknown ioctl 21541 [ 2054.453426] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2054.454948] Unknown ioctl -1069530359 18:12:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2054.512292] Unknown ioctl 21541 [ 2054.512368] Unknown ioctl -1069530359 18:12:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xa8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:11 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0x9, 0x2}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) tkill(r1, 0x3ffffffd) 18:12:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x8001a0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2054.688873] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2054.849005] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:14 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() pipe(&(0x7f0000000240)={0xffffffffffffffff}) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000000280)=""/105) r2 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0x8000, 0x121000) timerfd_settime(r2, 0x1, &(0x7f0000000080)={{0x77359400}}, &(0x7f0000000140)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x1f000000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xb0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:14 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}, {0xffffffffffffffff, 0x450}], 0x8, 0xefa) 18:12:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xa0008000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2057.456128] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:14 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:14 executing program 0: r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000140)='/dev/hwrng\x00', 0x301000, 0x0) r1 = creat(&(0x7f0000000240)='./file0\x00', 0x10) r2 = openat(r1, &(0x7f0000000080)='./file0\x00', 0x4005, 0x100) ioctl$KVM_S390_VCPU_FAULT(r0, 0x4008ae52, &(0x7f00000000c0)=0x1) setsockopt$netlink_NETLINK_PKTINFO(r2, 0x10e, 0x3, &(0x7f0000000100)=0xaf, 0x4) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc0605345, &(0x7f00000002c0)={0x7fffffff, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r4 = getpid() getresuid(&(0x7f0000000280), &(0x7f0000000340), &(0x7f0000000380)=0x0) r6 = getgid() write$FUSE_CREATE_OPEN(r2, &(0x7f00000003c0)={0xa0, 0x0, 0x6, {{0x2, 0x3, 0x2, 0x8001, 0x4, 0x1, {0x0, 0x7, 0x10001, 0x1, 0x4385, 0x0, 0x6, 0x9, 0x6, 0x9, 0x9, r5, r6, 0x8}}, {0x0, 0x1}}}, 0xa0) sched_getattr(r4, &(0x7f0000000040), 0x30, 0x0) r7 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x4, 0x0, 0x0) tkill(r7, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 18:12:14 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}, {0xffffffffffffffff, 0x100}], 0x7, 0xefa) 18:12:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xb8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2057.659339] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xa0018000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() r2 = shmget(0x2, 0x1000, 0x100, &(0x7f0000ffe000/0x1000)=nil) fstat(r0, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x6, &(0x7f0000000140)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@empty, @in6=@ipv4={[], [], @multicast1}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@empty}, 0x0, @in6=@remote}}, &(0x7f0000000340)=0xe8) getresgid(&(0x7f0000000380)=0x0, &(0x7f00000003c0), &(0x7f0000000400)) shmctl$IPC_SET(r2, 0x1, &(0x7f0000000440)={{0x3, r3, r4, r5, r6, 0x4, 0xd0}, 0xffff, 0x0, 0x5, 0x0, r1, r1, 0x7ff}) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:17 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}, {0xffffffffffffffff, 0xa}], 0x6, 0xefa) 18:12:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xfdfdffff, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:17 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xc0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:17 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() getgid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2060.530125] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xfffffdfd, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:17 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}, {0xffffffffffffffff, 0x20}], 0x5, 0xefa) [ 2060.646772] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x8000a0ffffffff, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:17 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xc8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2060.904847] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2060.933686] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1, 0x9000}], 0x4, 0xefa) 18:12:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000001640)={0x8, 0x1, 0x80000000}) munmap(&(0x7f0000ff5000/0xa000)=nil, 0xa000) r1 = openat(0xffffffffffffffff, &(0x7f0000001680)='./file0\x00', 0x418040, 0x589e3de9a9ca10ca) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) r3 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000440)='/selinux/avc/cache_stats\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffffff, &(0x7f0000001740)={0x0, 0x18, 0xfa00, {0x3, &(0x7f0000001700)={0xffffffffffffffff}, 0x0, 0xa}}, 0x20) write$RDMA_USER_CM_CMD_SET_OPTION(r3, &(0x7f0000001780)={0xe, 0x18, 0xfa00, @id_tos={&(0x7f00000016c0)=0x8, r4, 0x0, 0x0, 0x1}}, 0x20) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000001880)={0x5}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) syz_mount_image$btrfs(&(0x7f0000000040)='btrfs\x00', &(0x7f0000000080)='./file0\x00', 0x1, 0x9, &(0x7f0000001540)=[{&(0x7f0000000140)="02675e14ed65fe13621c", 0xa, 0x7fffffff}, {&(0x7f0000000240)="373d1ba0e40b885ed3390a8397a71329143344b81e3a9ad2486f2eff96c236aa2a3706316dd93779d561c4888e93ff1927bd742c206a6bf93c9a446160ba76a4d2230351044c83f3790f9bcbcaba40cf74dbba18d209981b5cef51b9e43e5f3f242fd0860e2793bfa54841be35fd0dbe2f4528c76e113fb540068e3a38bf8b5a55c40e947d6f6ed3ec35a32e0ef82f341c", 0x91, 0x9}, {&(0x7f0000000300)="181f", 0x2, 0x4}, {&(0x7f0000000340)="2443191a233f5cb8cc56f0fb3d0ec1069edfc80ea7411b25192a4d1190108f", 0x1f}, {&(0x7f0000000380)="129e325c7de44f289b3855a7d1fe591aa33b1b49cb85c1fe5786678961982951964e61b7df0d61fb7db1d8f416f33a1fba291b7660168ea1326008732ff00b4217779e9e773495c51d3c05544d06f6f657239d028dad656631988a20c9c4a0cdaf731f57f117483dbdc11dcf6d0a7a9ad11184635264470e6d9473b238de9c8d2964e26927f456dc9b9813b2f21bddffde7574b2dc3c869e", 0x98, 0x4}, {&(0x7f0000000440), 0x0, 0x4}, {&(0x7f0000000480)="45754af1fbf635855893732ee233e817910c6e4b41716281b28189b5b2bb9939488c8227f1c411ba1c02115f58e3c22da91a731bea644b8794730bdda454e8a4b5649b1acb623f5902166da4f4447c4f14f37778d9d68e56e4eb8fb41f39c15ef8245456bdad261c9688d54a95c39ef7b42c1287316e625719511f28165a7a4f2a5ca7c7a8c76d2c84908ad98d2a4fcd28146573dd67e65111dd8cd3ec8e6b2f395bdbf15c61d8d30b8e5fb1f88059d8ff4ae2861a19f94ace5dabd04ccd16efbec8d990ba24db3ce1cfe37373df50c78cc96add9ac9cb34c3c71d2b1b86cbb07835746ba7d6ce6772107e25e1eb3db92b94f83c7d1f3b51ef1709610d1bc50551b9e200ce441c518794fa29de4129da2b7d7b7b5fd52eaf5bb958fcbd7633023e4f819a6cacdd5cbe4cc5ea166c323d0c6c90d32c3e4804342c9ddd29132392a184d48cedf3fd66e483c5c5c2e2b428c9e4342129f3f6fffe4b582cdaf1523b7e5a1b3fe7eb164496eb79caeddec41bb3bd33e9d42d1bf909cb2b03588df3d31463d9225c8452656f3954231f63e70f6e4ea0c0e1cb06c9e451e67ad4ca3810d4c7f32d8185a902762a07dae47d9ffaa27075fb3983a7a66c1e2c920e7664a8009a82382dec1752657298c6191752d7ed154e411a1bbd058d771d442b53edb2c30a7a43d1b1bd05537df138a27c9d5952aa957cded7c6d9a989871cc35820d37e49d0fe91ca253147473ba7649bc92b6c82516c219708bc1e37081980d0587117e83e984bccdfa8492ccadd5f0fda7a10ace3f54da48a79e9e7b1a8533e60891aa804a3861e59250413a2128f0550aa30ea34de0e6c3222310ecb43b7f2e3f99d13d630185e784e93727a3a60c209e348eda55db04a6cc8c61fa12b8586180ca836e425ade5e838fb1b2a84e71bbb9ced887ec387a70ce6d87a17f87807079d730a686b23212509e052f6dabe511a4d044b40cd0410dc8eed05de2613a6dc981ff7c733a85fa03d2e4168c256ac6d19d51222b3a6904331a4859aae2094667d3394ddf608874742951750aa6f7a2016c6287d58aab802cee2e051dec70dacd6b52e9cf1deb7aad267093a809c1d301f1d61cfeb178a15f38ff21787747a8a87f445130b91fdd4e98b01aa7bf9d197e53b82c6d8621600a2706758e6642ac053b084188bcb1b0bfd89670c929491f78c1d12e482c3c270493c0d74af2d550ba16313eb02222abdb9b72c38a985e0cd0e76198f3505460dd308eb6f37b093c54733c98811098da62a158c0ab797b8c32478380a1163f5ea1c6499f854970aad5c21c2146cb7850df1699d3fd9da2c2fd082a82c915e19202454387ed0cc108c98a7208a27b81a55737a67cfcc05d8c28f5553e19b60c459aa095945c150497f827cae357e38f8f6b26af8a8b91208a3d5cbd454bfc20f512c947b922575a88bf5ddba56ffdd54ba78f8eaba355c66084e472b29d575855d16f0949b48f601c631ba9f99fdd72fdc7a6527b9319ec751789d42862d274f026161a946d5cfe6835aefb5c5978a1f1c532061a0fa62028412fd4501f76291f5b5861184d0ebb46476d5ee10764ce8f3b79077b5d94af7817724b57f0c9a2be7dcf0bf46b97ade52e4f7b5b1db01e4ee57ffd3c9ce468b0ed5f417bed5b694079012c6345ef6f841decc7ddc912fbc1bee2f07ab885ae8b4de4755a123d8e9a83f0034e1f6ccbd26cde458d944f0d768b397ce72de93d5f4d4864d7d3b7225e21b931b9355521de56ac53a788e8148fc54c534de2cdd0be66d0afb71bd2644dfce2d81f021c11aa517e0343f77e0e718327f8a5650768ff68f401d875a10bae2a87ed710cddb38fe28460e5ed23515c38b585957f2f5641a9b44dc53408e1a6080ff00d6d9c50544850c7b398eb56f919879b253b650f0fd4a836d0d70508cedfe33713f67080ed83a419a36e0ae0d645dbec19220ed1bd482d7a5d9280061dc83aaa8fe2953d57e75bd38c1110a6e1572de9b3b3f8a11c48d67bd8e14f102875ebf58b92df907debe5a0ca38af1c19191f71e59c8f0ed845ef0b1009f539f0657fca4b6d9de668918f13258c44e96a35f6c38de67d799cc9ce6748edf8bfeaa709f06062372581d289e0e5e87c9184ff8a79dd32a0e16415da3d04bdb846b6461eebe8876368b6807301f6728433436496c6c5bcb4df1eb28c00dc69e91010b6d6afd5a226103289db0cb454074652d5c104da315a59dc7547b27aabe968ec0cde59d1aa73c75e69749795b8b3985cdca79a8b9e9e269db1059613afb9d069c26140bd7c95edce5da04d96cebc40b05e6e9eea79cce115d20656a6fac660b2354f15a0a8821b34d8e2270a3b057dddc42ab63d99df1a44d1cb74365e9600ccf761b24700a260e6cb3432c5518330e56a8c05f531c2f7e1adc045b03061ce77618a27cef447d55635a4d01274c88475796cfb17d01d05fddaecd713ef2ef3572941fb2f15846297ec451984f90c47a56aa4468d54dae812e11405de4151cd0a961bfdcfcc9224ff40ddb80617b989f5a94689a47e35eeb69af5dd1434012eb74367e4d63288973bed0819951b676fab5a33cdddcedf855d7afeb2d06b7655781c078a3a3f6338a088d8ef4b62b0792e38601c4c9f8b222e2f193bb3781d01853fa4c69c97b048880bb4499d91be3b6391bb06a5c4e59546c26f88c337ca5a6b383bdfabc83d4cd39a42fc33da4c229977bad494cffed3c4e916a75b132cbb75edb42823c9fa2352a5998f1d21a58f2a549296fdac1fa2358f021519ca5a4210d8a1a00c75b2b08b85b763b3cb213804435da359cdc6051d73b00262927ae64ca013ecddad0d64fd49ae68f82496105a8502f5af17c6a0ab6e582dfac41924cd81502fe96ce548c3f881ee3e7d6d6ae61a18018a5ecb7a7aee5bedb1fb41b9ef756381f742649e7045be1b69691d7b64be06e5cb53ac15610a4440f79ddb5206a54a942004f45167e76be49b5cfd0b54f285e4bceb10c74e8ac5ddad03b976cf4d1448a3a00831b2a1310fae47ab60661c067a735166cefb040c80a386b1cef24a3190a8dbe5282f21cf13dcca7e1d203c4d0610f62219c21b5ccd982d33382f77d18c8f08875d3d4980bc501eab79882d783fc6b1f087d4583bbd3ec7021f518b9550139399de0fe5dc98d3c60b1a907f678c29c956c89291ec6e6e7a2be37d43690e4bdbe90addffaaca3d680048aa77564186acc75236c8cde4b78e255317cc475a064188bd7bef912d7f8e04fe8f49974551bc64d6f6944e422e903bd4dc6041d705d22411b01fbe6e628a8fb7235c607b62044852796d2cc20a985c64a4a6a9360b5fb63401a623c94a03e570bcaafbd7e8fafd07328bed3a35fd1a07a170e055a15f1000182c42cbe5568dbf1005c6c8c6e98ebedcb88e5533bf6662a3cdf0dcacfbe8a2bbf31da1ac1ae65d2926081f6f786142a31dd4af8f532ff62937b67745743ed292aafaa830589661608f942e2c1a3ab57c468534247d2020b93ce404c776fa789398a1c95eed0275a10c823b14f928d0906f6e9fd09e207642cc5f034457162a62e58e2038ba9cc55b2827fdce4abfbde3f4a6f5dd6a1376266e9f7a1b80d019f7d047db166d1d4fb7aa53350625f3ce4c7df4aae7d9c015c720f993bb046cf06cadf7f20d4fd830183a139ba4cbe74195601210f0dd60cc6747494e287f6945ac27c614e690a8b6e9a7ac485dc20051a259c42e9d5328a2f20ccad544de43b10fc46a1bb793580011b9727aa47cc98afe641a04c737107d247397be0b2b780f048ac3e7be412acb10bab3cc30491149bd0044153f776ced0263ba282453d9c92a0f027ffc8c6e74e8bf1c7352564b7d6d688897abe9cf65ae84d837ce244bed66bd56337bdfed864cbfa767663e35f57c9029455000bbf4bfe2ad3b170a1158025f834b5a5ebb40a28fd260097660d845bfb3165d6be2bc3d3cb4b6f65597ed0774a0f71488d3ab939e9e563c0c18a472339d76a2187c6ecb4cfa66d89ff403a41916c870f2e460953ebd135d11dd0f82490c566c2923458381385f778dc6c531303a5f8901261b43bd88dffaefc1a00e7a0c8d930bf3b0732101b299d68f8c41438743ac9251b7fc99422c81b9a53a554e1688bbe36834706380785cd89e79aaacd27c8f46fe33d994ff09b2538df16c214cde801ab5cf71b9f0bf2be68d12ffd0d98e1914f82997fe4ba323115b1c450749386d16840fe5d904cdc272665399a0247dfe39a8df6b655d9f114ce31895e50299e2e23291544d9c54534ee0e1f89a31c560365dd51ab7f20cb3784cb475d70f02ae7a44e488690727e4384903834057e36ef3dd534bc15ad0c1311b14338cb8c57434a99ce887a365cd2674ac3d140cec63a49e2d7b5d881f6ff170946312b8e7669179373cf432016a733c3ff50079451108fe8e7dbb7f06aa274bbab9e83607b99c875c79d327a450cb09b970565522eaa05bab6ad66617d89d94cc0a35fe7f1d7cb828e8e62d0d30feaa01d84d3013d88423806e83ff2544441a23e9bccdd349f013557b12d317792b993a193236236f28c19f772e024e813c483f7cb3ff66e141b7fa3662c3907166d25ad0af22f0cbc516a5c96853b93a9c0d64c7b3b4eba50eb6cd43032358ca995be7a369dcc0eb0dbd535c0809ccad74989de23cbf714cdd235048d4e026608d3166c37856fb8f1cff2da3a4dc697e2fb5a66c0be803dd2e597bd8140929050d2e71c199b0249561caf64c9fef09a4032bf13c66695ced1fa94e0018889f19815982f3e65e033621e22bc70f544b77db5b81ffa826c6a0f3c52bcb2262755c4214532f5aef4a809d482afb183953a0697f8bed0ddd073b670f26e8653d3ea7dc9148d5110e7f6201dd4d5796098a1f0e0e2c5ae4a3ac4cfbd9b701a6e366b31b095b54141c46d4701b570303e2ce073acba7a425bfc93f62e944c088d09c2500b88982f3f7abf93309b483888f554a269127a8e737eed43409870949e0b081c905a811aa20442293428052420ce5ac488ac808e0385cdb90dd2f0d4cc735b33a87887ebbcad88634f6bb5e84780347bb99867e0ca0b412131cd506a862aedbe4835f569079d63d760dc4e125b32a65e825c466d423a316d7f31f43d8e4425894f5148b7e3bd9933af4b3f602253c076645cf69f2e90c8d8b066a84de273873c0eedec2578b95ba8e4700fd160323a6775647efe820538f3a2a30a2ae7e068a2515bcafe9ea30bbc9948a747084ad302860f45b8e086500eb490a3199a773fd5b4df33cc429b4b53b8a476270ad8d9e0ec5c3339a2bd5e36bcc852a3aa8439910f44c0e0948aa698b0e541b2690b929c9dcb2cf81631518b15be29aa085b043e4387974e90b007307b4781b087f24f49bfcff64df7d7a3435e8cda335597601458293fa3f13a785ad30444d1f8b58620b6a044c6e22ac1a4e2f3d1e1224f96a1a167a35a0fd7c8938b8d63d6a51ad3ad9494b030b7c2ed4e44340c8048e7dc3c1cfc92e43951ea0c42b4f274da581b6f122e7513aef78a6b69b3d88d63885c948cd0937b0fe78197cb8ba0f6137a56829775aeaaa5b58b403fa2f14f64f0830d4f927d1901cc5b54a3076c081a82209a62652131946d7505517a4930d0fae2e89ab54eab9914e86f307101995d52f4f48dd4d9b539adab87a674569c4f609cfa251f52e12d4ac633b86b7ad639e58bd089ce159db00741178a1f6c958654885bb02a1d3cdf0d526e60eb388a42a94ce4210935e2895580c4cbeb61efe6f32300de75113712", 0x1000, 0x1}, {&(0x7f0000001480)="60360b0cced26b9ba08430a7ee1f0cd2dabb0591a94fd083", 0x18, 0xd29}, {&(0x7f00000014c0)="f200b41bf616d8fd1a082cfc2201e1ae37640816af5235f9ec22774a582d4ea2ac64e89d8b966a070af8df3388bfe8358cc4e7991a31c0375bdad71e9c200e9704162cf4b15e875009b3651bf5272001399eb78ddeb647098dec1c8eb54d820a4e06699600c0543239db869744fa4c400b70ecaa1c04", 0x76, 0x9}], 0x4c000, &(0x7f0000001900)=ANY=[@ANYBLOB="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"]) 18:12:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x8001a0ffffffff, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xd0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x1f00000000000000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2063.614784] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:20 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}], 0x3, 0xefa) 18:12:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:20 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0x1000, 0x20000) ioctl$EVIOCGREP(r1, 0x80084503, &(0x7f0000000240)=""/229) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() getresuid(&(0x7f0000000080), &(0x7f0000000140), &(0x7f0000000340)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xfdfdffff00000000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xd8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2063.848845] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:23 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x800c00) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = socket(0x9, 0x2, 0x3) getsockname(0xffffffffffffff9c, &(0x7f0000000240)=@hci={0x1f, 0x0}, &(0x7f0000000000)=0x80) sendmsg$can_bcm(r1, &(0x7f0000000340)={&(0x7f0000000080)={0x1d, r2}, 0x10, &(0x7f0000000140)={&(0x7f00000002c0)={0x7, 0x100, 0x3, {}, {0x0, 0x2710}, {0x0, 0x20, 0x1, 0x76}, 0x1, @canfd={{0x3, 0x7fffffff, 0x10000, 0x8}, 0x24, 0x0, 0x0, 0x0, "0986821a36dee0ff45762536e4aa47b3f95786ceef78a37bb95305f376adec9376199d4d84db423c247a17dd4ad84ed60595a4b71a6e1ecc43bed9676ea5b121"}}, 0x80}, 0x1, 0x0, 0x0, 0x44001}, 0x20004000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r3 = syz_open_dev$vcsa(&(0x7f0000000380)='/dev/vcsa#\x00', 0x7, 0x400) ioctl$TIOCNXCL(r3, 0x540d) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) tkill(0x0, 0x0) 18:12:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xffffffffa0008000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:23 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xe0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:23 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}], 0x3, 0xefa) [ 2066.707809] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0xffffffffa0018000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:23 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r0 = openat$proc_capi20(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20\x00', 0x4400, 0x0) ioctl$SIOCX25SDTEFACILITIES(r0, 0x89eb, &(0x7f0000000080)={0x0, 0x9, 0x6, 0x100000001, 0x8000, 0x2, 0xb, "cbccaf06209a281b0d57e55157490a63c7a2fa34", "ac63ab2290c318b4ef02de96221a2932bad10f9e"}) tkill(0x0, 0x0) 18:12:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:23 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}], 0x3, 0xefa) 18:12:23 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xe8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x1f00, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2066.958806] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:23 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {0xffffffffffffffff, 0x9000}], 0x4, 0xefa) 18:12:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x3, 0x0, 'queue0\x00', 0x80000000000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x8000000003, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x0, 0x2) lstat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = getgid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000300)={0x7, 0x2, 0x8, 'queue0\x00', 0x7f}) setsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000001c0)={r1, r3, r4}, 0xc) 18:12:26 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x8000a0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xf0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:26 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {0xffffffffffffffff, 0x9000}], 0x4, 0xefa) 18:12:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setfsgid(r1) tkill(0x0, 0x0) 18:12:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x8001a0, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2069.831719] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:26 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {0xffffffffffffffff, 0x9000}], 0x4, 0xefa) 18:12:26 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0xf8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:26 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) chmod(&(0x7f0000000040)='./file0\x00', 0x80) tkill(r1, 0x35) [ 2070.142198] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2070.191809] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x1f000000, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:29 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {0xffffffffffffffff, 0x3001}, {r1}], 0x4, 0xefa) 18:12:29 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) timer_create(0x5, &(0x7f0000000040)={0x0, 0x29, 0x0, @tid=r1}, &(0x7f0000000080)) tkill(0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/enforce\x00', 0x20000, 0x0) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r0) 18:12:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x102, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xa0008000, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2072.929894] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00', 0x2}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:29 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:29 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {r1}], 0x3, 0xefa) 18:12:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x108, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:29 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) open_by_handle_at(r0, &(0x7f0000000040)={0xf, 0x1, "6546be3aa99416"}, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2073.232198] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xa0018000, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:32 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {}], 0x3, 0xefa) 18:12:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x82) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f0000000040)={0x0, 0x200, 0x97, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) setpgid(r1, r1) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x110, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2076.003337] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xfdfdffff, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:32 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) fcntl$setownex(r0, 0xf, &(0x7f0000000040)={0x65d5c87ea18f5b1c, r1}) 18:12:32 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {}], 0x3, 0xefa) 18:12:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x118, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2076.213186] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xfffffdfd, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:33 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2076.486665] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2076.517031] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x7, 0x4000) ioctl$BLKRESETZONE(r1, 0x40101283, &(0x7f0000000080)) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240)='TIPC\x00') sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r2, 0x404, 0x70bd2a, 0x25dfdbfb, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) r3 = gettid() fstat(r0, &(0x7f0000000340)) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getpriority(0x1, r3) tkill(0x0, 0x0) 18:12:35 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0, 0xc1}, {}], 0x3, 0xefa) 18:12:35 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x120, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x8000a0ffffffff, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2079.065716] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:35 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0}], 0x2, 0xefa) 18:12:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x8001a0ffffffff, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:35 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffff9c, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0x1, 0x4cf7}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000140)={r1, 0x3}, &(0x7f0000000240)=0x8) 18:12:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:35 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x128, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x1f00000000000000, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2079.322645] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:38 executing program 0: membarrier(0x28, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xfdfdffff00000000, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x130, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:38 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0}], 0x2, 0xefa) [ 2082.178623] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:38 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000240)='/dev/dlm-monitor\x00', 0x204180, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffff9c, 0x84, 0x22, &(0x7f0000000280)={0x5, 0x8001, 0x5, 0x7, 0x0}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000300)={0x9, 0x8200, 0x9, 0x7fff, r2}, 0x10) r3 = syz_open_dev$admmidi(&(0x7f0000000040)='/dev/admmidi#\x00', 0x2, 0x2) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000080), &(0x7f0000000140)=0xc) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xffffffffa0008000, 0x0, [0x0, 0x0, 0x1f000000]}) 18:12:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x138, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2082.347684] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:39 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0xffffffffa0018000, 0x0, [0x0, 0x0, 0x1f000000]}) [ 2082.529748] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:41 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:41 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x101000, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r1, 0x10e, 0x1, &(0x7f0000000080)=0x3, 0x4) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:41 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x140, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:41 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x1f00, [0x0, 0x0, 0x1f000000]}) 18:12:41 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:41 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0}], 0x2, 0xefa) [ 2085.246587] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:41 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x8000a0, [0x0, 0x0, 0x1f000000]}) 18:12:42 executing program 0: mbind(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x1, &(0x7f0000000040)=0x3f, 0x1, 0x0) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) openat$selinux_context(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/context\x00', 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) stat(&(0x7f0000000080)='./file0\x00', &(0x7f0000000240)) tkill(0x0, 0x0) r1 = shmget(0x1, 0x3000, 0x40, &(0x7f0000ff9000/0x3000)=nil) shmat(r1, &(0x7f0000ffa000/0x2000)=nil, 0x65cb8aecb1711cf8) 18:12:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x148, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x8001a0, [0x0, 0x0, 0x1f000000]}) [ 2085.442675] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:42 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2085.632588] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:44 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:44 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:44 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x150, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:44 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:44 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x1f000000, [0x0, 0x0, 0x1f000000]}) 18:12:44 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {r0}], 0x3, 0xefa) [ 2088.324837] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xa0008000, [0x0, 0x0, 0x1f000000]}) 18:12:45 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) gettid() ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000140)='/selinux/status\x00', 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000080)='tls\x00', 0x4) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:45 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:45 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x158, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:45 executing program 0: ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00@\x04\x00\x03\x00'}) r0 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000000180)='/selinux/commit_pending_bools\x00', 0x1, 0x0) write$apparmor_current(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="7065726d686174203083303030303030300700000030303030365e0076626f786e65743100"], 0x25) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(0xffffffffffffffff, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000140)={0x0, 0x2}, &(0x7f00000001c0)=0x8) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000200)={r2, 0x4, 0x10, 0x80000000, 0x5}, &(0x7f0000000340)=0x18) r3 = syz_open_procfs(r1, &(0x7f0000000040)='oom_score\x00') ioctl$EVIOCSCLOCKID(r3, 0x400445a0, &(0x7f0000000080)=0x2) timer_settime(0x0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000380)=0x8, 0x4) tkill(0x0, 0x0) 18:12:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xa0018000, [0x0, 0x0, 0x1f000000]}) [ 2088.585892] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:48 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r1 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x3, 0x24000) ioctl$BLKSECTGET(r1, 0x1267, &(0x7f0000000080)) 18:12:48 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x160, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xfdfdffff, [0x0, 0x0, 0x1f000000]}) 18:12:48 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {r0}], 0x3, 0xefa) 18:12:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xfffffdfd, [0x0, 0x0, 0x1f000000]}) [ 2091.432673] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:48 executing program 0: r0 = syz_open_dev$cec(&(0x7f0000000040)='/dev/cec#\x00', 0x0, 0x2) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0x7, 0x4, 0x498, 0x0, 0x118, 0x118, 0x3b0, 0x3b0, 0x3b0, 0x4, &(0x7f0000000080), {[{{@uncond, 0xf0, 0x118}, @unspec=@AUDIT={0x28, 'AUDIT\x00', 0x0, {0x1}}}, {{@uncond, 0xf0, 0x160}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x4, 0xfff, 0x6, 0x0, 0x0, "8e82981e5d1cfe9596015f81d800ed1b1189731d8e6454d6ce6b5505602c1fe038f506d530d1f478ec734dd9d5eb891ff2542600413d3ff8d467694588dc2e83"}}}, {{@uncond, 0xf0, 0x138}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x1, 0x4, 0x732}}}], {{[], 0xc0, 0xe8}, {0x28}}}}, 0x4e8) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r1, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:48 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:48 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x168, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x8000a0ffffffff, [0x0, 0x0, 0x1f000000]}) [ 2091.627933] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:48 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f0000000600)={0xfffffffffffffffe, 0x20001f, 0xfff, [0x0, 0x0, 0x1f000000]}) r1 = gettid() r2 = syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x100) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2000000000001) fstat(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}) r4 = geteuid() getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f00000002c0)={{{@in6=@dev, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@ipv4={[], [], @multicast2}}}, &(0x7f0000000140)=0xe8) fstat(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r7 = getegid() getgroups(0xa, &(0x7f0000000440)=[0xee00, 0xee00, 0xffffffffffffffff, 0xee00, 0xee00, 0x0, 0xffffffffffffffff, 0xee00, 0xee00, 0xee01]) fstat(r0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r10 = getgid() syz_open_dev$radio(&(0x7f00000000c0)='/dev/radio#\x00', 0x0, 0x2) fsetxattr$system_posix_acl(r2, &(0x7f0000000080)='system.posix_acl_default\x00', &(0x7f0000000500)=ANY=[@ANYBLOB="02000000010001000000000002000400", @ANYRES32=r3, @ANYBLOB="02000700", @ANYRES32=r4, @ANYBLOB="02000200", @ANYRES32=r5, @ANYBLOB="0400060000fc3600283f0000", @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08028400", @ANYRES32=r8, @ANYBLOB="08000200", @ANYRES32=r9, @ANYBLOB="08000100", @ANYRES32=r10, @ANYBLOB="10000500000000002000020000000000"], 0x64, 0x3) r11 = semget(0x2, 0x3, 0x21) semctl$GETVAL(r11, 0x6, 0xc, &(0x7f0000000100)=""/35) 18:12:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff}, 0x80000) ioctl$KVM_XEN_HVM_CONFIG(r1, 0x4038ae7a, &(0x7f0000000140)={0x40, 0x838, &(0x7f0000000240)="893c66c7a5eee12ea94005893530837456fe898a48ee4dfba0d30ae59ad18d1f162013d7c9ceecc13784081ee5bd22012fcecd5866a9b7bc9476da67babc4f41887ef03ea9c0f615601bb152a2ed55b59eaa4c0af839968d9018719cd309691db0c2e179cc909caf2febbeec93aca9fd20ea9593ec7e58ce0c9a4fa614658f33dc61117deafbe3d207bbc0e50e6bd1fa236a49cf8bf390e5aa39a7b2d28574582e", &(0x7f0000000080), 0xa1}) 18:12:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x8001a0ffffffff, [0x0, 0x0, 0x1f000000]}) 18:12:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x170, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:51 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {0xffffffffffffffff, 0xc1}, {r0}], 0x3, 0xefa) 18:12:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x1c, 0x147041) ioctl$EVIOCGNAME(r1, 0x80404506, &(0x7f0000000240)=""/255) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2094.498695] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x1f00000000000000, [0x0, 0x0, 0x1f000000]}) 18:12:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x178, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:51 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x80002, 0x0) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000080)={0x1, 0x0, [{0xf000, 0xd8, &(0x7f0000000240)=""/216}]}) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f0000000140)=0x60, 0x4) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) ptrace$cont(0x20, r1, 0x1000, 0x100000000) tkill(0x0, 0x0) 18:12:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xfdfdffff00000000, [0x0, 0x0, 0x1f000000]}) [ 2094.699174] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffa0008000, [0x0, 0x0, 0x1f000000]}) 18:12:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x3b) tkill(0x0, 0x0) 18:12:54 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x180, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:12:54 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{0xffffffffffffffff, 0xf21a588782b96fa5}, {r0}, {r1}], 0x3, 0xefa) [ 2097.525248] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:54 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) ioctl$EXT4_IOC_RESIZE_FS(r0, 0x40086610, &(0x7f0000000040)=0x3) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:12:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0xffffffffa0018000, [0x0, 0x0, 0x1f000000]}) 18:12:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:54 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0xefa) 18:12:54 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x188, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2097.747804] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x1f00, 0x0, 0x1f000000]}) 18:12:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00\x00\xff\xe8\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00\x00\x89\xf1MxS\xdfde\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1b\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x3, &(0x7f0000000640)={0x0, 0x1, 0x0, @thr={&(0x7f00000004c0)="6a200350f4d20b801f76403bba1626e23841b4eb0c695f01f052bd66f21fb0b5ad5394f36919f6253ce587d95114399c84b62e996df51a85993a7d2c756a2dc2dba3828a72a38791076854df609a352d62cd7424b6c2743ad8870230", &(0x7f0000000540)="e8e214361ce3aa1e2cb1cb103320cc4cc18266a0b99c853ce34b48a8ccb0f0578c5fefcf6c3679ec6f28a4f8db15a336bb460c6fd8995d85c5d15e534a87d8d11b47ea4857165be948afc8bb8f71f544f723a941b6586c11e299a2815187bfcc392f1b317bd097f71c34aa599ae8b6da4f6adbd21f277fe4947020240fd080ad9f1503252850ce772d624dc1069a3f4223343d4cee37438ba6d821ee4b9e9312c8ad5ed388736f3bdd9d708c11ddd17db53366b6461386e6154f2501c3303df48e67920a5ae44f425166bbea607b32f9472e84fb69639c92c34665eeba9b5abb9b83607482c76c"}}, &(0x7f0000000680)) timer_create(0x7, &(0x7f0000000780)={0x0, 0x2, 0x2, @thr={&(0x7f00000006c0)="85b5aa1877502a1493ae859729ffec826c40012a43cf7cb0527399e6b92090e005ee76e6cfaea6389ea145343d0d1c62b4fe54e176720ddb12fef8627c95f5ffde0ae15fc6689a0f1d6cd53cf22610c912fefcdc1d59394001eb", &(0x7f0000000740)="635ff6bfce2d281ad918f84d9320e26f0b151dc0cc3ab08f3ac2e7ea3ffc59"}}, &(0x7f00000007c0)) timer_create(0x4, &(0x7f0000000900)={0x0, 0x2f, 0x6, @thr={&(0x7f0000000800)="51b3ce5867c701061dc7", &(0x7f0000000840)="e38da8e3859aa33db3e76d0e86600a9135e878cd10aa4fe12a1a7598517f273d104a6926efa0c345537cb79a27911e33413f52d2fb52cde6046435e9302742b932e64313020c4975346d6d82fb67ad5bdf84f46f7f7d8d51affb8bf143f7b627eb31d72e052023034d66ef14ab08ca0e9107b35e3b447c93e0eb853726662856550167ac356b6f4f294efa09fc7f092cd2ad09ce080fe18fa7d55785e6e8dfc7ec3bad3426"}}, &(0x7f0000000940)=0x0) timer_settime(r1, 0xfffffffffffffffc, 0x0, 0x0) r2 = creat(&(0x7f0000000980)='./file0\x00', 0x5) ioctl$TCSETA(r2, 0x5406, &(0x7f0000000440)={0xb1, 0x20, 0x1000, 0x80, 0x8, 0x4, 0x1, 0x3, 0x4, 0xfffffffffffffffb}) r3 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/checkreqprot\x00', 0x101000, 0x0) ioctl$UI_ABS_SETUP(r3, 0x401c5504, &(0x7f0000000080)={0x41f, {0x5d0, 0x8, 0x80000000, 0x1f, 0x7, 0x8}}) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000140)={0x0, 0x7, 0x7, 0x7e, 0xfff, 0x51}, &(0x7f0000000240)=0x14) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r2, 0x114, 0xa, &(0x7f0000000480), 0x1) ioctl$sock_SIOCGIFCONF(r3, 0x8912, &(0x7f00000003c0)=@req={0x28, &(0x7f0000000380)={'teql0\x00', @ifru_settings={0x20, 0x7, @fr=&(0x7f0000000340)={0x1ff, 0xffffffffffffff7e, 0xcdec, 0x7, 0x2}}}}) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000280)=ANY=[@ANYRES32=r4, @ANYBLOB="3f0000008a8363365b5034b854a80e6c28c24dab20ff8d1191f4550316528d907dd94c4116096d367a1d8025a2cae5423f781a6c5f0e7a6435da6093cb5af0f5d49443"], &(0x7f0000000300)=0x47) tkill(0x0, 0x0) 18:12:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:12:57 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{}, {r0}], 0x2, 0xefa) 18:12:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x8000a0, 0x0, 0x1f000000]}) 18:12:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x190, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2100.578985] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x8001a0, 0x0, 0x1f000000]}) 18:12:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:12:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x7, &(0x7f0000000040)={0x0, 0xc, 0x0, @thr={&(0x7f0000000240)="b5d4b9847e642bba0b642c1e9f521c7b862201519a5a2cc1a04b4ce0cb17c604a4e86ea34a2ec78adfdf3adc7f95f62f8f1ad53ca7c09009483004d07955dbaf6a1dfea7dca96099d73a6dbc567125b2e34497c3827107931cb8eb1b6ecbbd6cb32d5d32b6316612c4b56e0d39ada669c878fc448818fb6ccc1711f15c2247b9cce4d2f1bb1db51e52e4b112cf1c3b556ee8478d992fc5cc985688f55d95157527a48fce60b8f66c6262fe7942007ebd0b89c86dae", &(0x7f0000000300)="0a99bbe0fab4f119b2660907092bdabe1a9a2085ee7228ba5dc19080a81c2f1ce60f469cf5eff34d947e695a6e3feed06699253ce42dbf531d5119941d6176e01703470497c36eac356f59eb4d9633d878269b8b8b2fe429cbd39586be2ff3657cf34e6c1bf8c538f279a5a3f39485e045276447f290b48443b012dde27a295113cd0d442d32644e96571bdc596e4c5dae2cbdacb4fff07fed1d056bb6620a6b2b0d23e58a661c74940e5e0c5cd3f12ed02d0354425d6c80b206aa14cdddc3844605f5c1df34ff7350cddc322db9403d25fefd54045e2e912e00513f74b784627a3168a5814e9ac9a71ee4d37fdc267bf38387602462b6"}}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) r3 = syz_open_procfs(r1, &(0x7f0000000140)='net/l2cap\x00') ioctl$ASHMEM_GET_NAME(r3, 0x81007702, &(0x7f0000000400)=""/104) tkill(0x0, 0x0) 18:12:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x198, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2100.752549] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:12:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x1f000000, 0x0, 0x1f000000]}) 18:12:57 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffff9c, 0x0, 0x7, &(0x7f0000000040)='queue0\x00', 0xffffffffffffffff}, 0x30) wait4(r1, &(0x7f0000000240), 0x2, 0x0) gettid() timer_create(0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rtc0\x00', 0x200000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000280)={0x3, r0}) 18:12:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2101.069445] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1a0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xa0008000, 0x0, 0x1f000000]}) 18:13:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0x9, 0x1, 0x3}) 18:13:00 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{}, {r0}], 0x2, 0xefa) 18:13:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() mount$9p_xen(&(0x7f0000000040)='queue0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000140)='9p\x00', 0x9579fdb3f95cec2a, &(0x7f0000000340)=ANY=[@ANYBLOB="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"]) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2000) 18:13:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xa0018000, 0x0, 0x1f000000]}) [ 2103.689281] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2103.780668] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1a8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:00 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) r2 = openat$proc_capi20ncci(0xffffffffffffff9c, &(0x7f0000000040)='/proc/capi/capi20ncci\x00', 0x80000, 0x0) ioctl$SIOCX25GSUBSCRIP(r2, 0x89e0, &(0x7f0000000240)={'bridge_slave_1\x00', 0x80000000, 0x9}) timer_create(0x3, &(0x7f0000000080)={0x0, 0x6, 0x3, @tid=r1}, &(0x7f0000000140)) timer_create(0x4, &(0x7f0000000340)={0x0, 0x1f, 0x2, @tid=r1}, &(0x7f0000000380)) timer_create(0x5, &(0x7f00000003c0)={0x0, 0x1b, 0x6, @thr={&(0x7f0000000600)="6732f03da9987d827b2dc0e2f8cedaa886dff9af15aabf09085aceab4d01ffe07dfd73c42cfcc3263bedae8c6ec678d7d54c4181e02d38727ea5108eebc702be9bcd65cb94a0b88de4d48b295c6e945df55d588cfa45f41594a3a3992b", &(0x7f0000000680)="e89bbf373a3375e3059959b2be99fe70518de35da966414eed0887306b464b7a4c959c6ea3de4e"}}, &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000580)={0x0, 0x1f, 0x0, @thr={&(0x7f0000000440)="d664110c3e474e20eccced0a3e1f", &(0x7f0000000480)="6460a1849170cd08ed8317d209b043c5c65d810c9b8d5b9428f18fea8f117310be661374b5081177a537b6cda93bd39b7dd45df07f68c281d38802811377dbf73776fd3cf568f8009ce1bdcf9823068b7c2036e80c93f553f36c55d9f6d38d50df95242abd8ca57020a759ab4800cd9fb86ec9bcebe0b4f9faa7195442a41722c104afeefb52eeef33781ffd5c177f931334f7c8577da79ea15985b0970cae5f33f7bbc1b9c7174b36f9562b40b3a45738693fad080fd39583062107d5b32aec65b2c7cfc72f5e7e059feab5aacca31a062c0a071633e66ce001b63bef805ee4d3731c7b2f4a92e8145e37650d"}}, &(0x7f00000005c0)=0x0) write$selinux_context(r2, &(0x7f0000000400)='system_u:object_r:sshd_key_t:s0\x00', 0x20) timer_settime(r3, 0x1, 0x0, 0x0) tkill(0x0, 0x0) ioctl$VIDIOC_S_FMT(r2, 0xc0d05605, &(0x7f0000000740)={0xc, @vbi={0x3f, 0x7, 0xb642c8d, 0x34343459, [0x0, 0x3ff], [0x2, 0x7], 0x2}}) 18:13:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xfdfdffff, 0x0, 0x1f000000]}) [ 2103.963770] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f00000002c0)='/dev/autofs\x00', 0x1, 0x0) sendmsg$nl_netfilter(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000008}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, 0x4, 0xb, 0x4, 0x70bd29, 0x25dfdbfc, {0x7, 0x0, 0x8}, [@typed={0x8, 0x8e, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x40000) r2 = gettid() r3 = semget$private(0x0, 0x1, 0x400) semctl$GETNCNT(r3, 0x0, 0xe, &(0x7f0000000040)=""/42) timer_create(0x0, 0x0, 0x0) ptrace$setsig(0x4203, r2, 0x70f4, &(0x7f0000000300)={0x1d, 0x40, 0x1ff}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xfffffdfd, 0x0, 0x1f000000]}) 18:13:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:03 executing program 5: openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r0 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{}, {r0}], 0x2, 0xefa) 18:13:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x8000a0ffffffff, 0x0, 0x1f000000]}) 18:13:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) ioctl$FS_IOC_FSGETXATTR(r0, 0x801c581f, &(0x7f0000000040)={0xffffffff7fffffff, 0x6, 0x1ff, 0x80000000, 0x101}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2106.774708] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1b8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x8001a0ffffffff, 0x0, 0x1f000000]}) [ 2106.947022] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000002c0)=0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() r2 = accept4(0xffffffffffffffff, &(0x7f0000000240)=@ipx, &(0x7f0000000080)=0x80, 0x80000) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000140)=0x6, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000300)='/dev/fuse\x00', 0x2, 0x0) timer_create(0x3, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/policy\x00', 0x0, 0x0) 18:13:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:06 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1c0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x1f00000000000000, 0x0, 0x1f000000]}) 18:13:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x0, &(0x7f0000000040)={0x0, 0x2f, 0x3, @tid=r1}, &(0x7f0000000080)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:06 executing program 5: r0 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x0, 0x0) r1 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00', 0x2, 0x0) poll(&(0x7f0000000300)=[{r0}, {r1}], 0x2, 0x0) [ 2109.818162] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000140)='/dev/rfkill\x00', 0x102, 0x0) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r1, 0x84, 0x74, &(0x7f0000000240)=""/214, &(0x7f0000000340)=0xd6) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rtc0\x00', 0x4000, 0x0) ioctl$KVM_GET_MP_STATE(r2, 0x8004ae98, &(0x7f0000000080)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:06 executing program 5: socketpair$unix(0x1, 0x4000000000002, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffee1, 0x2, 0x0) perf_event_open(&(0x7f000001d000)={0x0, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext, 0x0, 0x0, 0x4}, 0x0, 0x0, 0xffffffffffffffff, 0x0) [ 2109.866221] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xfdfdffff00000000, 0x0, 0x1f000000]}) 18:13:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:06 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1c8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xffffffffa0008000, 0x0, 0x1f000000]}) [ 2110.119419] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) r5 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1) 18:13:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1d0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0xffffffffa0018000, 0x0, 0x1f000000]}) 18:13:09 executing program 5: syz_open_dev$vcsa(&(0x7f00000001c0)='/dev/vcsa#\x00', 0x4, 0x0) getsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu\x00', 0x200002, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) fchdir(r0) r1 = creat(&(0x7f0000000340)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x4002) io_setup(0x103, &(0x7f0000000080)=0x0) open(&(0x7f000000fffa)='./bus\x00', 0x141442, 0x0) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x800002, 0x10, 0xffffffffffffffff, 0x0) io_submit(r2, 0x1, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x377140be6b5ef4c7}]) [ 2112.917138] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = syz_open_dev$adsp(&(0x7f0000000340)='/dev/adsp#\x00', 0x938, 0x40) getpeername$ax25(r1, &(0x7f0000000380)={{0x3, @default}, [@rose, @null, @bcast, @remote, @remote, @default, @netrom, @rose]}, &(0x7f0000000400)=0x48) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffff9c, 0x0, 0x10, &(0x7f0000000240)={{{@in6=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in=@loopback}}, &(0x7f0000000080)=0xe8) quotactl(0x0, &(0x7f0000000040)='./file0\x00', r2, &(0x7f0000000140)="b34b8a83f115f6a3b456") timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x1f00, 0x1f000000]}) 18:13:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:09 executing program 5: clone(0x200, 0x0, 0x0, 0x0, 0x0) r0 = dup2(0xffffffffffffffff, 0xffffffffffffff9c) ioctl$TIOCGSID(r0, 0x5429, 0x0) mknod(&(0x7f0000f80000)='./file0\x00', 0x1040, 0x0) execve(&(0x7f0000000400)='./file0\x00', 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ptmx\x00', 0x0, 0x0) read(r1, &(0x7f0000000540)=""/11, 0x485) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000200)) clone(0x3102001ffe, 0x0, 0xfffffffffffffffe, &(0x7f0000000140), 0xffffffffffffffff) r2 = creat(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', 0x109) r3 = dup2(r1, r2) execve(&(0x7f0000000280)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000006c0), &(0x7f0000000700)) ioctl$TUNSETTXFILTER(r2, 0x400454d1, 0x0) open$dir(&(0x7f0000000240)='./file0\x00', 0x841, 0x0) clone(0x3102001ff6, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) execve(&(0x7f00000001c0)='./file0/file0\x00', 0x0, 0x0) ioctl$BLKROGET(r3, 0x125e, &(0x7f0000000180)) 18:13:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1d8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2113.138870] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$midi(&(0x7f0000000040)='/dev/midi#\x00', 0xf34, 0x49c802) setsockopt$bt_l2cap_L2CAP_CONNINFO(r1, 0x6, 0x2, &(0x7f0000000080)={0x8, 0x8001, 0x9, 0x1000}, 0x6) tkill(0x0, 0x0) 18:13:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x8000a0, 0x1f000000]}) 18:13:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:12 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1e0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:12 executing program 5: r0 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x50d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f00000005c0)='/dev/rtc0\x00', 0x0, 0x0) open(0x0, 0x0, 0x0) dup3(r0, 0xffffffffffffffff, 0x80000) accept4$inet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @broadcast}, 0x10) syz_genetlink_get_family_id$tipc(0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f00000000c0), 0xc, 0x0}, 0x4800) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='ip6_vti0\x00', 0x10) write$selinux_access(r1, 0x0, 0x0) 18:13:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ubi_ctrl\x00', 0x400100, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000080)={0xffffffffffffffff}, 0x13f, 0x5}}, 0x20) write$RDMA_USER_CM_CMD_CONNECT(r1, &(0x7f0000000240)={0x6, 0x118, 0xfa00, {{0xfff, 0x9, "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", 0x16, 0x6, 0x8001, 0x9, 0x8, 0x10001, 0x9}, r2}}, 0x120) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x5, 'queue0\x00', 0x939}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2116.011354] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x8001a0, 0x1f000000]}) 18:13:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$vsock(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vsock\x00', 0x400, 0x0) ioctl$VIDIOC_G_PARM(r1, 0xc0cc5615, &(0x7f0000000240)={0xf, @output={0x1000, 0x1, {0x3, 0xf09}, 0x2, 0x6}}) sendto$inet(r1, &(0x7f0000000080)="505c0e04afc7dc81d63238b464f0709323058aa5f96e38dc55ec3bd7f66fc9d080df0e02c2a50c5e88640fadec57a31c11bb0d695dc7fa1026d9d69e", 0x3c, 0x20044000, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2116.064699] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:12 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:13:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:12 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1e8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2116.260309] Unknown ioctl -1060350443 18:13:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x1f000000, 0x1f000000]}) [ 2116.290787] Unknown ioctl -1060350443 18:13:13 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:13:13 executing program 0: r0 = syz_open_dev$vbi(&(0x7f0000000040)='/dev/vbi#\x00', 0x3, 0x2) r1 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000001b40)={{{@in=@remote, @in6=@ipv4={[], [], @multicast2}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@mcast2}}, &(0x7f0000001c40)=0xe8) sendmsg$nl_route_sched(r0, &(0x7f00000021c0)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000002180)={&(0x7f0000001c80)=@deltfilter={0x4e4, 0x2d, 0x10, 0x70bd2d, 0x25dfdbfe, {0x0, r2, {0x2, 0x1}, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@filter_kind_options=@f_matchall={{0x10, 0x1, 'matchall\x00'}, {0x360, 0x2, [@TCA_MATCHALL_ACT={0x124, 0x2, @m_bpf={0x120, 0x20, {{0x8, 0x1, 'bpf\x00'}, {0x60, 0x2, [@TCA_ACT_BPF_FD={0x8, 0x5, r0}, @TCA_ACT_BPF_OPS={0x44, 0x4, [{0x11, 0x4, 0x8001, 0x2}, {0xfffffffffffffff7, 0x5, 0x9, 0x8}, {0x7, 0x7, 0x9}, {0x401, 0x6c8, 0x3, 0x4}, {0x120, 0x2, 0x3, 0x9}, {0x0, 0xffff, 0x0, 0x3}, {0x81, 0x100000001, 0xffff, 0x5}, {0xffffffffffffff01, 0x6, 0x9, 0x20}]}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0xa}, @TCA_ACT_BPF_OPS_LEN={0x8, 0x3, 0x3}]}, {0xb0, 0x6, "31812d8b672dfca710814c66dd2b1d37f9bbe024b5b002294906760c3299b238198827075dc39d76c9e125c37f04071e7435a18441064674d155e2b1460837d2f849ad6a95e09d8048c0c3c25666f527a089d1a13e414aa6ce0fedfbe7d476760db3dfa9a2fbd44ecb31e563d2f4227957ba8c511262abacbf49ad0f2c2946d40fe25f10ac64a9abad46a9b1da47e3ab9ae1043d1fc0cad05c941361521247f496c5a6de048ad5ec2e"}}}}, @TCA_MATCHALL_ACT={0x114, 0x2, @m_skbmod={0x110, 0x17, {{0xc, 0x1, 'skbmod\x00'}, {0x24, 0x2, [@TCA_SKBMOD_ETYPE={0x8, 0x5, 0xb1}, @TCA_SKBMOD_DMAC={0xc, 0x3, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xf}}, @TCA_SKBMOD_SMAC={0xc, 0x4, @local}]}, {0xd8, 0x6, "fe656fc70eb4c2fb34909a5ddea6758e5de9ef9efe8e91cd5babe9fe6172b45e33725ebf3095ddfb3e05039d219053f4deb6225cfe8681250fd48788ba089f763e13ce97e565bb22ce56bf6c8739e1d1d9b64c95fe9d901b79eb62c434485e6e59507527f064cf58f92bc4a78ce1060c2836437f16e74fed67f74a1f6c60bd2891d3f2f597173ac1c8a018af5c6ffbf45191068c331b65d5d150619236613e7dde1134187ee5e565d9e58d79b9312a06bcac9743a76a6676fce001a84c40c9a7090f36d921805e782f748bb9e2dacfa9ed4a58cc"}}}}, @TCA_MATCHALL_ACT={0x114, 0x2, @m_connmark={0x110, 0x16, {{0x10, 0x1, 'connmark\x00'}, {0x20, 0x2, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x2, 0xffffffffffff0001, 0x100000000}, 0x200}}}, {0xd8, 0x6, "c06ca37a956808748de36868161c92372548261a1f2576489c7d5fe0208839648e5389428e2edc4324b8f7200dddfd17ad29f355db6cc5ee80604b1b631bfff1b1913995131d7cd06d6f5e460233385a5eb49770b56384b9e3639325abbaff0b431bbb7047718cb4ccfceb7f9f20b675663385372470de2b076f29ff5fe95cf0c493659414b5560883dad923ac4a1a4f7d2476c5a2a1efc5472830a8d5d81f6ec9ff47143f1a85d379aa99ad6e7016914a4ea0a6ed4329775b575bdef5aa0bc4ca0c7948eea87d4254d3fe2ff20fb041e1"}}}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0x9}}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}]}}, @TCA_RATE={0x8, 0x5, {0x5, 0x9}}, @TCA_RATE={0x8, 0x5, {0x6, 0xc7}}, @filter_kind_options=@f_flow={{0xc, 0x1, 'flow\x00'}, {0x124, 0x2, [@TCA_FLOW_ADDEND={0x8}, @TCA_FLOW_BASECLASS={0x8, 0x3, {0xfff1, 0xe}}, @TCA_FLOW_EMATCHES={0x108, 0xb, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, @TCF_EM_IPT={0x68, 0xfffffffffffffffd, {0x5, 0x9, 0x0, 0x0, [@TCA_EM_IPT_MATCH_NAME={0xc, 0x2, 'policy\x00'}, @TCA_EM_IPT_MATCH_DATA={0x44, 0x5, "e64119f9127342729a81582518302092b9b230527024181272cb129b5624afe5ac45d4951b35b7648b77e2ecbb610559a0cfa735480d1a0198a8216d6959"}, @TCA_EM_IPT_MATCH_REVISION={0x8, 0x3, 0x31}]}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xab}}, @TCA_EMATCH_TREE_LIST={0x5c, 0x2, @TCF_EM_META={0x58, 0x2, {0x9, 0x4, 0x1000, 0x0, [@TCA_EM_META_RVALUE={0xc, 0x3, [@TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_VAR, @TCF_META_TYPE_VAR="ba2489de"]}, @TCA_EM_META_LVALUE={0x8, 0x2, [@TCF_META_TYPE_INT=0x8]}, @TCA_EM_META_LVALUE={0x34, 0x2, [@TCF_META_TYPE_INT=0xa, @TCF_META_TYPE_INT=0x2, @TCF_META_TYPE_INT=0x3, @TCF_META_TYPE_VAR="c18cb93bb36ffee7", @TCF_META_TYPE_INT=0x8, @TCF_META_TYPE_VAR="e0f3", @TCF_META_TYPE_INT=0x4, @TCF_META_TYPE_INT=0x7, @TCF_META_TYPE_VAR="727c5143749aef", @TCF_META_TYPE_INT=0x9]}]}}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, @TCF_EM_U32={0x20, 0x24f7b8dc, {0x1, 0x3, 0x3c, 0x0, {0x7f, 0x7, 0x6, 0x8000}}}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xbd2f}}]}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x9}]}}, @TCA_CHAIN={0x8, 0xb, 0x40}, @TCA_RATE={0x8, 0x5, {0x3, 0x5}}]}, 0x4e4}, 0x1, 0x0, 0x0, 0x2000c004}, 0x40000) timer_create(0x6, &(0x7f0000000080)={0x0, 0x10, 0x4, @tid=r1}, &(0x7f0000000140)) fsetxattr$security_ima(r0, &(0x7f0000000300)='security.ima\x00', &(0x7f0000000340)=@ng={0x4, 0xe, "51b2115ed9ff9cedf162bc9a"}, 0xe, 0x2) ioctl$VIDIOC_DV_TIMINGS_CAP(r0, 0xc0905664, &(0x7f0000000240)={0x0, 0x0, [], @raw_data=[0x100, 0x1, 0xc111, 0x0, 0x4ae4, 0x8, 0x401, 0x7, 0x5, 0x7, 0x8, 0x17, 0x383d, 0x10001, 0x6, 0x0, 0x1, 0x7, 0x5, 0x1, 0x10b2, 0x7fffffff, 0x9, 0xfffffffffffffeff, 0x100000000, 0x2, 0xfffffffffffffff9, 0x3, 0xd86, 0x3, 0x5]}) r3 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r3, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0xfffffffffffffffe, 0x0, 0x0) ioctl$LOOP_GET_STATUS64(r0, 0x4c05, &(0x7f0000000380)) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ioctl$EXT4_IOC_MIGRATE(r3, 0x6609) [ 2116.435072] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:15 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1f0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) socket$inet6(0xa, 0x3, 0x401) timer_create(0x2, &(0x7f0000000040)={0x0, 0x39, 0x3, @tid=r1}, &(0x7f0000000080)=0x0) timer_settime(r2, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:13:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xa0008000, 0x1f000000]}) [ 2119.084001] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xa0018000, 0x1f000000]}) 18:13:15 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 18:13:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$swradio(&(0x7f0000000340)='/dev/swradio#\x00', 0x1, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={r1, 0x0, 0x1, 0xfffffffffffff801, &(0x7f0000000380)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa}, 0x20) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_open_dev$audion(&(0x7f0000000080)='/dev/audio#\x00', 0x400, 0x440) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000140)={&(0x7f0000000040)='./file0\x00', r2}, 0x10) ioctl$FS_IOC_GETFSLABEL(r0, 0x81009431, &(0x7f0000000240)) symlink(&(0x7f0000000400)='./file0\x00', &(0x7f0000000440)='./file0\x00') tkill(0x0, 0x0) 18:13:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:15 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x1f8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:16 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xfdfdffff, 0x1f000000]}) 18:13:16 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) fgetxattr(r0, &(0x7f0000000040)=@random={'user.', 'wlan0#user\x00'}, &(0x7f0000000240)=""/248, 0xf8) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000440)=""/125) [ 2119.545231] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2119.606724] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xfffffdfd, 0x1f000000]}) 18:13:18 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:18 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x7, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(r1, &(0x7f0000000080)='projid_map\x00') listen(r2, 0x8) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/syz1\x00', 0x200002, 0x0) tkill(r1, 0x11) 18:13:18 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x208, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x9, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2122.185730] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:18 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x8000a0ffffffff, 0x1f000000]}) 18:13:18 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:19 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x210, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:19 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) [ 2122.402438] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r0, 0x40505331, &(0x7f0000000040)={{0x9, 0x100000001}, {0x7fff, 0x4}, 0x1f, 0x5, 0x9db}) [ 2122.486328] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x8001a0ffffffff, 0x1f000000]}) 18:13:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$sndseq(&(0x7f0000000040)='/dev/snd/seq\x00', 0x0, 0x28000) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r1 = syz_open_dev$sg(&(0x7f0000000240)='/dev/sg#\x00', 0xffffffff, 0x1) ioctl$SG_GET_NUM_WAITING(r1, 0x227d, &(0x7f0000000280)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x6, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) fanotify_init(0x0, 0x40002) r2 = shmget(0x1, 0x2000, 0x30, &(0x7f0000ffc000/0x2000)=nil) shmctl$SHM_UNLOCK(r2, 0xc) gettid() timer_create(0x10000000, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0xfffffffffffffffd) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_int(r3, 0x0, 0xf, &(0x7f0000000080), &(0x7f0000000140)=0x4) 18:13:21 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:21 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:21 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x218, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2125.289718] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x1f00000000000000, 0x1f000000]}) 18:13:22 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000480)={0x4, 0x0, 0x0, 'queue0\x00', 0xfffffffffffffffc}) r1 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x100000000, 0x0) ioctl$VIDIOC_SUBDEV_ENUM_DV_TIMINGS(r1, 0xc0945662, &(0x7f0000000b80)={0x5, 0x0, [], {0x0, @reserved}}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = gettid() timer_create(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000900)={&(0x7f0000000380)=""/49, 0x4000, 0x800, 0x3}, 0x18) timer_create(0x7, &(0x7f0000000300)={0x0, 0x2d, 0x4, @thr={&(0x7f0000000140)="0841123ea7191a6c1ac9caf33081d437a781d835f41b0f9c33f1a6ae3902fca7a229d9110e94dffd219e629ed46dad4b41a5d93a2e75b6ab5cbb76d691471462ba56f0380aa155ad286b4309da8b822097af482b453c94cc8446b76d3c8087239157bd44a8a4d8a126e2890549fa06f93f34b960813c0198b761908c4dc7b9e449b6eddcafd66038df8a8139197da2ca20b03a6bbd2b4ddf8352a3cc7949ff12d8bbfe1ec6715d3f4820fc56e4c4df2df91e41d99bb09e876d2a4316ef22853d8fb1697f5f3813260a3d70d926123cf9453a370c09a1acfd6c15fffcb3ee7e95dfe8b3d613badf72694f8224649da9", &(0x7f0000000080)="0532ff2f4ebe81337af179869bfc7f992d35576131cf84e1b7c4d28a255a04c15f974db083b09b3f912efbab"}}, &(0x7f0000000340)) timer_create(0x0, &(0x7f0000000440)={0x0, 0x3b, 0x4, @thr={&(0x7f0000000380), &(0x7f00000003c0)="a38d0803bd8a5ea9fe06fb49fdf3e48695a1ecd8b84bb5d4799f1a3bb64b9a677e7cf7632344f8375638bc68a746d204d18dc04bb0db14e6613e5f9093e13bface6374f63f308c52fce2b78904407aa6b2995ba4521ad3c520646dbd83b089f188b123bf7c8c060d2468f64308cf72a538"}}, &(0x7f0000000540)) timer_create(0x7, &(0x7f0000000680)={0x0, 0x34, 0x5, @thr={&(0x7f0000000580)="814e1bd584d843afb008d4658eab5c36c4ea87185cbd271ff5ed87110a716d8717845aeafe57d032d3851e417d9da7b47d63921356b0b1dced156f13103f1fc7ebb891985297ac5f053ba0338aa6da9fbe989ecd4b3c37bb5ab064b14c04fec502ece6130fddd81a7d1e98ec79c49996d40518fee9b3b6846d6d2a2f0d9aca780d96bf21fd6006cea73c90f51acb8a5cee940b3504803ecae952b49ee4fc79ed5265d4ef5a4df40b07ce35637489ec237a413c812f", &(0x7f0000000640)="677caeb59c186abac8b38d14447b17"}}, &(0x7f00000006c0)) timer_create(0x6, &(0x7f0000000700)={0x0, 0x18, 0x0, @tid=r2}, &(0x7f0000000740)) timer_create(0x0, &(0x7f0000000800)={0x0, 0x7, 0x7, @thr={&(0x7f0000000780)="6112ca0b6aff89a068f5ff60cd098f34f875c3a30bfbaeb5f7", &(0x7f00000007c0)="5fbe7743641cea003e9ac6a0ff7352fec579bf7effffde"}}, &(0x7f0000000840)) timer_create(0x7, &(0x7f0000000880)={0x0, 0x28, 0x0, @tid=r2}, &(0x7f00000008c0)=0x0) timer_settime(r3, 0x1, 0x0, 0x0) getpgid(r2) tkill(r2, 0x9) 18:13:22 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:22 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x220, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xfdfdffff00000000, 0x1f000000]}) [ 2125.510974] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:24 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:24 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:24 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc04c5349, &(0x7f0000000040)={0xef, 0x7, 0x5}) ioctl$SNDRV_SEQ_IOCTL_GET_NAMED_QUEUE(r0, 0xc08c5336, &(0x7f0000000240)={0x0, 0x1, 0x1, 'queue0\x00', 0x8}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:24 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:24 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xffffffffa0008000, 0x1f000000]}) 18:13:24 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x228, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:25 executing program 5: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) [ 2128.338744] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x3, [0x0, 0x0, 0x1f000000]}) r1 = gettid() r2 = syz_open_dev$vcsn(&(0x7f0000000300)='/dev/vcs#\x00', 0x8, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={r0, r2, 0x0, 0x1}, 0x10) timer_create(0x7, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r3, 0x84, 0x66, &(0x7f0000000380)={0x0}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000400)={r4, 0x74, "fc58371a4ae3409245791c7aeae803bbda6bd7b8dbaf142b13f900203c91192170ab3e8fe3ac510aebdabf301733601ea0c4f0dd919f3b521c30c096f076a716b92f85d3f0d128d491c7a08d060a73cf0080e5f9eb0ef7a8e93ed0b97feb0c05608ab7b648208d188a951353f178554f7358f67a"}, &(0x7f0000000480)=0x7c) setpgid(r1, r1) getsockopt$IP_VS_SO_GET_SERVICE(r3, 0x0, 0x483, &(0x7f0000000240), &(0x7f00000002c0)=0x68) timer_settime(0x0, 0x0, 0x0, 0x0) r5 = openat$selinux_avc_cache_stats(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/avc/cache_stats\x00', 0x0, 0x0) ioctl$EVIOCSREP(r5, 0x40084503, &(0x7f0000000080)=[0x3, 0x3]) tkill(0x0, 0x0) tkill(r1, 0x37) 18:13:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0xffffffffa0018000, 0x1f000000]}) 18:13:25 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:25 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x230, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:25 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) [ 2128.590738] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f001f00]}) 18:13:27 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:27 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x33) 18:13:27 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:27 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:27 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x238, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2131.365007] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:28 executing program 5: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000140)='/dev/vga_arbiter\x00', 0x2, 0x0) clock_gettime(0x0, &(0x7f0000000300)={0x0, 0x0}) mq_timedsend(r1, &(0x7f0000000240)="d322d791b859453b80675a7fd75a56e8bb8775eec9fea3039890e75975b411833f069778e2f4a96702bab807ac7b4c82866d49e06ee2ee745b8c06b521db1b97fce3311e5931f245e1000015536f93dcf37adec0d915e70f6e3a7cc9b637950133ddfb7169c9d62c4d0f66c4e8ad11e7507580d38732e2c31876a4312c4cf85a02266ea848ed0d2b332c420cbc9bfeb4ffa1fa9e2690c8083710ca78b983105f6cfab06b03968ea3844b99", 0xab, 0xe85, &(0x7f0000000340)={r2, r3+10000000}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r4 = shmget(0x3, 0x4000, 0x0, &(0x7f0000ffa000/0x4000)=nil) shmctl$SHM_STAT(r4, 0xd, &(0x7f0000000040)=""/84) 18:13:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x1f00]}) 18:13:28 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x240, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2131.529699] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:28 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:28 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vga_arbiter\x00', 0x131000, 0x0) ioctl$PPPIOCSMRU1(r1, 0x40047452, &(0x7f0000000080)=0x10000) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x8000a0]}) 18:13:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x248, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000500)='/dev/snd/seq\x00', 0x0, 0x200002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x6, &(0x7f0000000080)={0x0, 0x40, 0x4, @thr={&(0x7f0000000240)="ef8700bbda63e564b1de6aaecc97127537a841eb9d7b1cef2b7fbc0286f407191183dc93b3a656acfd1dfaad2f7d13ac0e2c99a4e323eb341d8f1b7bc5ed6d5fcd160d7238da65422410f87e2b46496f2dce82d461b8e4dcbdcc5ebd8633689ecae31dec99485b0cc671961499772847adf9765c52cc9107b8e61fa097c23cfb4a75a10f", &(0x7f0000000040)="33c4b5"}}, &(0x7f0000000140)) r2 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000)='/dev/rtc0\x00', 0x206c00, 0x0) ioctl$TUNSETPERSIST(r2, 0x400454cb, 0x1) timer_create(0x6, &(0x7f0000000440)={0x0, 0xa, 0x1, @thr={&(0x7f0000000300)="67959d688babe5f0339a3e710d0a5ea3053093f3092d29a742f7b292b64f1cb3240308718f191828c5fd67c6823f60bb451d8fbb4aa325033bfa0a9aad8a2b18e2998630792d344cee055325fe461a17619ec32a27ff7520437b2254a4e9ca029b428d31256ed4c764f90915f44384d91a83bdfec65862938b2714d483445a13c2af1d456b2428c1be07fdaf24a97546551b7ac4e1b23e0a42f8bb38dacfde0f8932c483023b8ce20f08d49a1c1b34eddaf8ffebcfd61a6c46bf86db1a9c384c373c", &(0x7f0000000400)="6feff014b9ac1c909ce1ecf420e64b251db72edf"}}, &(0x7f0000000480)=0x0) timer_settime(r3, 0x0, 0x0, 0x0) tkill(r1, 0x19) 18:13:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:31 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x8001a0]}) [ 2134.486379] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:31 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x20000000, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = syz_open_dev$cec(&(0x7f0000000080)='/dev/cec#\x00', 0x1, 0x2) connect$bt_sco(r1, &(0x7f0000000380)={0x1f, {0x1, 0x0, 0x4, 0x8, 0x1, 0x32}}, 0x8) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000500)={0x8, 0x0, &(0x7f00000003c0)=[@enter_looper, @register_looper], 0xf9, 0x0, &(0x7f0000000400)="84b2aec807440cbe16b2a48e6d00781e9f5e3e95153b891e94ecb9389351aac39f1dc7d870e727883bd5ea3dc1e2d5299ce3df66b28aeb4d5bea6d71d0beae8d71206b030454b3b297ce0710a32502cfe8c356cb4ceb30f2f94d2327d807e7a61f9b9b7b8f52a8f56406de83d32d46781bac216dcbd680c36336df6c785bb65a1c56c16b95e8b573cd4313504b814e9aaf866192a374b45b12af5d761e1c03fe49b39f2c508982d10398d533a514f4c8a2a820603e42ef3830c49be2cbdcb627434bbb414154d15a79b7f26b92c3685a58bad73e25ffe032132356b2f61b936a857a4cdcf076c85e79654bf4232dc94581829a5a46f99575f8"}) tkill(0x0, 0x0) r2 = openat$dlm_monitor(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-monitor\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000540)=ANY=[@ANYBLOB="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", @ANYRES32=0x0], &(0x7f0000000140)=0x8) 18:13:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x250, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:31 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x1f000000]}) [ 2134.744713] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2134.789842] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) ioctl$EVIOCSKEYCODE(r0, 0x40084504, &(0x7f0000000280)=[0x1, 0x5]) r2 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1, 0x200) getsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000080), &(0x7f0000000140)=0x4) sched_getattr(r1, &(0x7f0000000240), 0x30, 0x0) 18:13:34 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xa0008000]}) 18:13:34 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x258, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:34 executing program 5: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) [ 2137.578614] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x87, 0x0, 0xfffffffffffffffc, 'quete0\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x19\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\v\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', 0x3e}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000180)='/dev/full\x00', 0x600002, 0x0) ioctl$UI_SET_RELBIT(r1, 0x40045566, 0x4) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x8bc004a221e575a8, 0x0) r3 = syz_open_dev$radio(&(0x7f0000000080)='/dev/radio#\x00', 0x2, 0x2) bind$netlink(r1, &(0x7f00000001c0)={0x10, 0x0, 0x25dfdbfc, 0x11000001}, 0xc) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f0000000140)=r3) 18:13:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xa0018000]}) [ 2137.644890] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:34 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:34 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x260, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:34 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() r1 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) ioctl$KVM_SET_TSC_KHZ(r1, 0xaea2, 0x4) r2 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/enforce\x00', 0x70201, 0x0) getpeername$inet6(r2, &(0x7f0000000080), &(0x7f0000000140)=0x1c) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xfdfdffff]}) 18:13:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() flock(r0, 0x2) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) syz_mount_image$bfs(&(0x7f0000000040)='bfs\x00', &(0x7f0000000080)='./file0\x00', 0x5, 0x8, &(0x7f0000001680)=[{&(0x7f0000000240)="40d9a266483766f962fc83e04276ae435057f7eac2552479214630aee1390da8f770d47358ad0b05a73cf4d43de67c33bb12952abf3a592bd58daf5d82cba4d2b9dd0bf0842a05ce375d043f12be", 0x4e, 0x7ff}, {&(0x7f00000002c0)="467603b2d4cdb6815d0f391150ca8dab8e96cbc081ea5038e0f887fffd0a33198d82207fc6a55b7986f6fd619d7ea43ff3fe1f4a2436a433323ee7df6198f0cd445d593bdd3a824a087d5274483c92cead4ca4d8bd2adc90094c052fe372a6a2c3ef03006f3abde341070cb1a959adc707c66f17d7817d08905b995f99642acd31d67fb57134cee14c1ce571b03efd2e4478a831978e62621a5d3facf8d4f3f060b14ac77c5c65cb017ecacbd8c0247eab2df391666384590307b9f692d0b3d7101d24f83314a3a3cf0d7707c05289e62069d4440d489ce66163", 0xda, 0x7}, {&(0x7f00000003c0)="d371ec2051944374324b12733401860971383931ec98782cca5c85258fa51c1a2a8f64a604184d516acf2864ceee2c968ad789017504dc3384f5209ef0cc3093ceb970d9f60d682573535e76016bbdbc0ceda9fd47503c4eaa4162f007d14d4a5048cd0222fbe009e04fa7f01a709bfa756fc4ba802a1928627200ab325e94b0b95bc1e5e2ba8996b9af5fdc9b6d864e8e5a96ab8b4a96c49fa641a249205b5ecf19a223368016db7cf48fa6454749e4", 0xb0, 0x8}, {&(0x7f0000000480)="570a3ddeb8c3aa097e4bdb5956352b1ca3e0e65899c359bdf47fee716109eb76bc1fbd9dff54eafa77faa7fba923ffbcc5985a9c9ec5a7425d3118601e41776c803b25b2a0c465a04dfaa08fb58b5361cbe2bc4f85c0d731889aadfab2ff72790e6da9fab3b07dd9e8f53fb979a035e6b8056dc3cd5cf59e7e17ae70a71db25b", 0x80, 0x6}, {&(0x7f0000000500)="684edcbb856a3a82add4a35868784bfcd1d7d0c28dadc072412437087e1db05b97934abb4b2bc9ec23f52bb531e71a0ca084a85487e0c1ff44ef0cd4d882aef4b711fd284491710187296274c2ca39deed2b7c7adcab361b9a811db8ad6a10b4fa096f0e213b0704d18dc10044bf478814597e193ed8c76ab354c35b562797138ba73eb759c2f76a61fda97e851a4b9258562323988432c53468a80fc9cb40661cacf77f5eab1fec2c7ec9d167f7ac1cf2c0e6127f7c272c90175ef8f300c993d818dde78994ec23c48966add6f09df2aa18f52b381d17ed6dbe0b8fb42479b037e3d261295717cb73f8d83982bad72f2806", 0xf2, 0x1f}, {&(0x7f0000000600)="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", 0x1000}, {&(0x7f0000001600)="fda1f1da98084125acdbddbeb5f67666b245688fbd1a39b8905ca7b9ed20a3d00ae698eb9689dde12b2d04e37ebae1cd41931369eb0b89d2a61f0cb7eb3b3af14733b7ec60e26396778f0fcb0b571b6eccbf988976e8161e075432bbe31c3d400e46c5b2a164a54c596563b5e4a3be", 0x6f, 0x7}, {&(0x7f0000000140)="ba3c05e2c9566c5729a6797f9a83862ca8ad", 0x12, 0x800}], 0x800004, 0x0) tkill(0x0, 0x0) 18:13:37 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x268, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:37 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8, 0x2000000013}) 18:13:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xfffffdfd]}) [ 2140.718895] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2140.743967] BFS-fs: bfs_fill_super(): No BFS filesystem on loop0 (magic=8093fffc) 18:13:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:37 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x270, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:37 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000080)={0x0, 0x1b, "ed30aabb621e4acf8998456f08d0a37e029acb1bcbd5b891ce41e7"}, &(0x7f0000000140)=0x23) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000240)={0xd7c, 0x5, 0x201, 0x9, 0xfffffffffffff000, 0x8, 0x5, 0x3, r2}, 0x20) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x8000a0ffffffff]}) [ 2140.983258] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 18:13:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x8001a0ffffffff]}) 18:13:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) fcntl$setflags(r0, 0x2, 0x1) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x1000000, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000140)='/dev/ubi_ctrl\x00', 0x40, 0x0) write$P9_RXATTRWALK(r1, &(0x7f0000000240)={0xf, 0x1f, 0x2, 0x4}, 0xf) tkill(0x0, 0x0) r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x8000, 0x0) ioctl$SCSI_IOCTL_GET_IDLUN(r2, 0x5382, &(0x7f0000000080)) getsockopt$inet6_IPV6_IPSEC_POLICY(r2, 0x29, 0x22, &(0x7f0000000380)={{{@in=@remote, @in=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@initdev}, 0x0, @in6=@loopback}}, &(0x7f0000000480)=0xffffffffffffffd3) ioctl$SIOCAX25DELUID(r2, 0x89e2, &(0x7f0000000340)={0x3, @bcast, r3}) 18:13:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x278, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000240)='/dev/cachefiles\x00', 0x0, 0x0) connect$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x5, @empty, 0x10000}, 0x3bc1c54a7c279bcb) syz_open_procfs(r1, &(0x7f0000000040)='net/raw\x00') setsockopt$CAIFSO_REQ_PARAM(r2, 0x116, 0x80, &(0x7f00000002c0)="cbb2bc357eb30dc65c0323e5f323fe564c42aff6a3b783f60c3b93cc50beee120ec0c30050e84bd31043c2ea48f9bef3508a2a9d79d0dce2bf9b8b113d07872c65edff561c28e81937f0974e5903a5299d7fad650670f0f73ea2dc8a313648c64e8e75592844d2ddfaee8befd9b7d1b70496e0fc4e26c50dbdc59892503ee42cccb03496a43eb21155dfef9e8f606ee9d8ba657917bed0ce9ffd216ecb59a028c7cdd0f086ac", 0xa6) tkill(0x0, 0x4) [ 2143.798194] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 18:13:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x1f00000000000000]}) 18:13:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x280, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:40 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) mount$bpf(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='bpf\x00', 0x21000, &(0x7f0000000380)={[{@mode={'mode', 0x3d, 0x1f}}, {@mode={'mode', 0x3d, 0x4}}], [{@smackfsdef={'smackfsdef', 0x3d, 'ð1em1'}}, {@audit='audit'}, {@smackfstransmute={'smackfstransmute', 0x3d, '/dev/snd/seq\x00'}}, {@dont_appraise='dont_appraise'}, {@defcontext={'defcontext', 0x3d, 'user_u'}}, {@hash='hash'}]}) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r1 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x400000, 0x0) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000240)={0x0, 0xb0, "3c92ce99876c25fb7287bfddec04eb21a777354217142ec9a1580d3cf184da67c26a64a014e751765caef345f3d5df9d91e4373e4360a1e33a04b69852e940dc6a57448f41ee7c2a7fab7fbed110c512d6ffbfe6327e665a6477c6c2f2877228cd5a8debf887ab310968db10d23830c60246bdac49f01c2c2b3731e8c80c4925a6c12e883fc03bcd5b9e7044695565f7d4b2d8f922c891eb830aba2629d03e23e3764cf6b4309409a3c63a92e9306d1c"}, &(0x7f0000000080)=0xffffff38) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000140)={r2, 0x979, 0x6, [0x0, 0x80, 0x3ff, 0x81, 0x7, 0x1]}, 0x14) tkill(0x0, 0x0) 18:13:40 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) [ 2144.069973] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2144.268292] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xfdfdffff00000000]}) 18:13:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 18:13:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x288, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x5, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) [ 2146.865932] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xffffffffa0008000]}) 18:13:43 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) syncfs(r0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x290, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:43 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x0, 0x2000000013}) 18:13:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f0000000540)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) pwrite64(r0, &(0x7f00000005c0)="73b4470e6c9f4be56b6b4f99c450cade67c668dc835d6e2a4e22f84caacd15ac7b3a94557f073a6b3ce61c3dba7c88828876715aa35fb7119dfcc8b054efd2962c4a1cf5b1141b62d6382d3998b0c41785779684703041f4fe991202aa3004786b657f81a6b01c1f066da840e970cd6b11da48b33feb2e8632fa954fa3a9c69649600e63039bd8f7bec3a165a4b431f41243b145908b2e5092f11bdcfa086678d73d8343dc05e11a4c8e09b6863a0cef", 0xb0, 0x0) timer_create(0x7, &(0x7f0000000080)={0x0, 0x2e, 0x6, @thr={&(0x7f0000000040)="a857317f02e3a4fe8afd326d1e32ac24b45fccb2ebb2f45ff81d7aca", &(0x7f0000000240)="ef194fda95187be92a21276eb68790b89e798dc89616c4bd87a93df8562c2781196925183aad0a6f409a2a7f72f6b2698401c66d9eef45db8407974c47f5ed6a796ae5c12898a342c350dd20c679fc4c7ebc97114266087f80d846360a9da07615398f5169f41797ec238144f2f52f3a4a3664a0d5e51edbf414f60d6b505f0b93a065847ebf8f4e540e51ee17"}}, &(0x7f0000000140)) timer_create(0x1, &(0x7f00000004c0)={0x0, 0x21, 0x0, @thr={&(0x7f0000000300)="90a66586169a8e5105c285f405b6f87911fdbf2c4401b9255430cd4d330d0c81b44cf93f564b1eec5a6beecf64db34f53ae09f43efd478837bd9dbcfed014145202897e2e4f27ab7ffe25be81754cde5dbf55477fc5f21284f340a4b70bdc2ba71cf1c3ab1f192f3497dc6a0580b025c52ee81fba27f1864cf82f6a3a7e9fded4eac84b60375189e45945c49227616b86541ecadfb3673a4515c65dde3599a407bdc49254118b6fb64eeef7c4ec17481e633546cbc2d2ce0875f5d4bd54f39ec9c4db2c201a5cc94a647d86ed9dd959a827d4006c42bd7fd12acb76603041f015065ae58f93e99ba0c02ae99", &(0x7f0000000400)="e6a2f6d1fcd8f42636f340f161d8a5557a99b81f35f62962b93f33d39499859bd87d7247b5d1c1429283f1cfea6980b331b6aead221769d5c409aa288eca9795b2a9677f477f75bb525de328e727a081a55e2fd9c9a1c35316b41ab86147c2080bdca2792dacce26fdac4bfb96dd47b58e1339a0cec4fcb8df6edd8a2b540750683c7ce250446e815b890ba5b05072de2091313e418cd5849591ab2b04100c6c93a0f95233d01991c0f577135f2dc774a1b598ae0adfa7"}}, &(0x7f0000000500)) timer_create(0x1, &(0x7f00000006c0)={0x0, 0x1b, 0x4, @tid=r1}, &(0x7f0000000700)) timer_create(0x7, &(0x7f0000000880)={0x0, 0x38, 0x1, @thr={&(0x7f0000000740)="0e7f258fae4ca754022105ca1708a3fc8f008370b1afeb6d2dd10134295e2e00461f0403e2c2efbcfc5f1cf28e4b7908b110d33a172f79782506fa432c5158a7a345c27b7391c462a201e4e322ff76a540cbf43b9ac72969bc091e25ae", &(0x7f00000007c0)="2847c42dd61c143c1bdd0979d8287510d5ff8f9ad59358d9b10c1db1d3adf5ed09fc62f505ee3ea9a4c3d47c9476ea6d19b62c0af9f6fa510acda21e8f1ca8810107777539f47d4da5422bb737caf655ce13316c347d3cae58b5b8beef5f01aa0e2bc648d9fa15f1681b0d1928cec2db0e5c2e2f356588054c487cdc9ee83c736989bf8936d9d4a821df3f88e73abe875ebbcea745cb75c67a274d5cf3c22f4ff11b266fc26bdd61dfab6a47536904aac9a2201fe1e11cc0e6c2"}}, &(0x7f00000008c0)) timer_create(0x7, &(0x7f0000001980)={0x0, 0x3d, 0x2, @thr={&(0x7f0000000900)="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", &(0x7f0000001900)="cc7c7b550f3c2445aaa0d3902b1b08839b29525b4947bb6dbf363071b70eb217cd35a6e1c98847fd50a20013f0eef70272931739f3c501b87a1f4c164da2d0ccfb56ce66cdfae1ab3fc25cab5d82c3836f6a"}}, &(0x7f00000019c0)) timer_create(0x3, &(0x7f0000002a40)={0x0, 0x2e, 0x0, @thr={&(0x7f0000001a00)="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", &(0x7f0000002a00)}}, &(0x7f0000002a80)) timer_create(0x7, &(0x7f0000002bc0)={0x0, 0x2e, 0x0, @thr={&(0x7f0000002ac0)="5b8cca2ab3ee74b1e6a51a8ae0ff628e83b2810bee01a4a3ef05912e277cfd29759a017732bc35e5cc34ea766814a787fc7ffcde9cf51a510fb53f25", &(0x7f0000002b00)="9d33dfb3642e54c619ebb6cda573e0c24029284aae1006f7e762f8121302d42b71a0b81d275f2d4bd1ef1d4992ac3a1077c68273047612c65965df1ff498c9085511542db6eedc44f7cc2cb641415e51505d7f51da232686c4e43f8608c4e9d6c51b1bf4e35d33850a9a2023c38610e5eec5bb2804ac4f7a5bafb421ec91541c2fb540816aead3cd926237777e8fdd209963e3a4981f331d2867162aa84ebec98eb16d52f35e3ba0"}}, &(0x7f0000002c00)=0x0) timer_settime(r2, 0x5, 0x0, 0x0) tkill(r1, 0xfffffffffffffffd) 18:13:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0xffffffffa0018000]}) 18:13:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:13:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x298, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) [ 2149.965837] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x1f00]}) 18:13:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x0, 0x80) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) ioctl$TIOCSPGRP(r2, 0x5410, &(0x7f0000000080)=r1) 18:13:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2a0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:46 executing program 5: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:13:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x8000a0]}) 18:13:46 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000240)={0x0, 0x1, 0x8, 'queue0\x00', 0x7fd}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) r1 = openat$selinux_mls(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/mls\x00', 0x0, 0x0) accept$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000140)=0x1c) [ 2150.217633] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x8001a0]}) 18:13:49 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:49 executing program 5: r0 = open$dir(&(0x7f0000001240)='./file0\x00', 0x40000400000002c2, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x10, r0, 0x0) mmap(&(0x7f0000fef000/0xe000)=nil, 0xe000, 0x1, 0x10, r0, 0x0) mprotect(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1) mlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) 18:13:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2a8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x1, &(0x7f0000000040)={0x0, 0x17, 0x4, @tid=r1}, &(0x7f0000000080)) timer_create(0x5, &(0x7f0000000140)={0x0, 0x38, 0x0, @thr={&(0x7f0000000240)="abed2e6b6a989b89356765ea45a050f5eabb57a41b856a86ddde8b1e7ac6196e1e2a93cbb912adf97df76fdf81ff2eb3d6e35d1921e70d5076aaac18560b56c44764b69ff14a0f423b27533767f58715ef171658e0ce010e2d99016555843b4f0151cef95c6100d3557997d63370f58ac6ee144933efcfecf6ac199c8376ada9728c66d1aabaf6d50eafce36f245c27d94be32804273dfa28fa3aea41e1f858aecdfe11772c5a0d8fc145493f8b693d5ef60ea47a534f6a1d9580ea2fe72e211dcf7a357", &(0x7f0000000340)="f8e334ea24cb426c76d67edc7aded0117e06428db0703ac1a9edb84e216c9759a557fd9ea2489e8e8c0feeb86d56071afe9a24f3d837c4dfd1472096e11535227e89f277"}}, &(0x7f00000003c0)) timer_create(0x7, &(0x7f0000000540)={0x0, 0x3, 0x2, @thr={&(0x7f0000000400)="34524e20a6013ac2328fec8fc6f58959b539044cb97340a0bf9de6772dc50c361cc6890feb7efb04123f9d377a3b2fd701f3f1b0a47d1b0fe03741d3f8259fe6d30cd55574", &(0x7f0000000480)="2be035bc3d34a1dcf9c2c597f0de7427a67475899f8375d87e0e4c2a65dc9b9252c07a870d50902aefeb902c3d2bdb7a98d2403b2499e7355ac5b8077d34b2f745c89e2185a2e88643599e7fc041108b0fc386501ac367fc95327cb265b24eb2f7140e964b6fd576d341d9a9992c57921cbe9ffd1155bd3009bf60c23eef14bb508fa15218ac101bf8d319ba1bc7e4eb6f0c5d3e9fbd6774d5c3a71efb8b42a287"}}, &(0x7f0000000580)=0x0) timer_settime(r2, 0x1, 0x0, 0x0) tkill(0x0, 0x3) [ 2153.024557] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:49 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = syz_open_dev$radio(&(0x7f0000000040)='/dev/radio#\x00', 0x3, 0x2) ioctl$ASHMEM_SET_PROT_MASK(r1, 0x40087705, &(0x7f0000000080)={0x100000001}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) [ 2153.046872] audit: type=1400 audit(1548094429.707:84): avc: denied { map } for pid=15885 comm="syz-executor5" path="/root/syzkaller-testdir170827529/syzkaller.Xhy1NW/2243/file0" dev="sda1" ino=17185 scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:object_r:user_home_t:s0 tclass=file permissive=1 [ 2153.058444] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x1f000000]}) 18:13:49 executing program 5: munmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000) mprotect(&(0x7f0000ff9000/0x3000)=nil, 0x3000, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) 18:13:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2153.299002] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:50 executing program 5: r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r0, 0x1000008912, &(0x7f0000000000)="0adc1f023c123f3188a070") syz_mount_image$hfsplus(0x0, &(0x7f0000000640)='./file0\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000340)='overlay\x00', 0x0, 0x0) 18:13:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xa0008000]}) [ 2153.555936] overlayfs: missing 'lowerdir' [ 2153.635837] overlayfs: missing 'lowerdir' 18:13:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) r2 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dlm-control\x00', 0x101000, 0x0) sendmsg$netlink(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000002c0)={0x88, 0x16, 0x10, 0x70bd28, 0x25dfdbfe, "", [@typed={0x14, 0x76, @str='/usr/sbin/cupsd'}, @typed={0x8, 0x2f, @ipv4=@initdev={0xac, 0x1e, 0x0, 0x0}}, @generic="8503e4d9f5e83e09111e410860f2d1169a98832b51ede998e1b2a6ad81eb8ad25274ed713f05d63eb6019b97feb6b9c272b32e104f68c8c717129e4fb208b6b178d3141e9ae152a5d426243d18f212c1f54bec2f", @typed={0x8, 0x35, @u32=0x10001}]}, 0x88}, {&(0x7f0000000380)={0x348, 0x30, 0x0, 0x70bd2c, 0x25dfdbfb, "", [@typed={0x8, 0x4f, @ipv4=@broadcast}, @nested={0x328, 0x8f, [@typed={0xc, 0x8c, @u64=0x7ff}, @typed={0x8, 0x3f, @pid=r1}, @generic="2fd445bd9b22b70b56dbc02606e180cfe4c6fcef8cfaa07ad2908b7b13b8f14976132850", @typed={0x8c, 0x40, @binary="0d7706b8361f7c780290e19cc5a3eaefdcc0f0a0f9823c3d9e0a4725cb792fb078b37c35ee027cf59540510298b6baf2dd25865ab273f78b3477fbdd9bb3b34b9ea8e8135640d879c41fdd82281abecb0d760dd4a699ca8f4533364e8f437f58e3f756179693c16647d853aedbc1cb3d0193977c1a2f14cf583ad873ef1007205841bac2a6"}, @generic="dc35368d83f21ac01ed60e4699b65e8172b47e220789b5ae22660b9e071ff4cb1bfb52f42426202e77c4e23ac9a06328432ea5276fbbeff1becc9e8103a9f29f67598ecc2aae54dce475090bf6895b5386fee8215335f6b3759fd6fc374d7517dd22ff7ea9aa3e689601b01280beee4e6012ab553d9e50375275106e353d58c65248c5e36d82c89991631cd5b3c7321d63302cce98568350e5869d7359003d576369299566c3b065aa7c546776bc454efd685883ae2752b57d56db20296cc007e68c", @generic="8289af162707069cdd91c5dd46d5a035d52386960f89bc050fe26035435e849d0a00f5a077095fd1c69111dad54963f558165140e66d8d64593925ed9a433965c027a2b8db6d0baf8f9bec7583e3b7780dc56d340b474e4b70f415830e4b7cd9c14b276151765b07cfe70bddba4b04fcdbd799028ce37c1c1c46384e686bbe1a817de53daafccd4aecdc8ea99c4a64284bcf19966ddeb5aa173ad1e1944a21475f054312028afd1ce8af55a1ed5cb6927ae3648d6a567bb202e4216945dfdf108d5ea6f42cfc1f1f6fc6be1d659af1011cedc3ae6a90fdd677d909c037af", @generic="855895a221bf2b655718178a700a1635a8766299084f08f08ed6d9787b1174f89d66decedbc7d6beaf1c03bfdf79c81e0797261ce03e2619559355bfe39b441fc5ff4786af823e424d816a7c6929fdcdba78a81cadf7624dbb26512bd8e21aaf4bf476c7411f005be46d9de877deec190cc54aa1eec34c8809600b53050bd137d9d2e442e0eee816003949b95cdac058192f1fb7680ceec9352ee4306926c5c818d92d9908fdac30eb9f7227db5bce21a2d526f86da2d054afb9c3df29"]}, @typed={0x8, 0x1b, @fd=r0}]}, 0x348}, {&(0x7f0000000080)={0x14, 0x21, 0x1, 0x101, 0x25dfdbfe, "", [@typed={0x4, 0x3e}]}, 0x14}], 0x3, 0x0, 0x0, 0x800}, 0x40080) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) write$selinux_access(0xffffffffffffffff, &(0x7f0000000240)={'system_u:object_r:auditd_unit_file_t:s0', 0x20, '/usr/sbin/cupsd', 0x20, 0x3}, 0x4d) 18:13:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xa0018000]}) 18:13:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2b8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:52 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2156.141406] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:52 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x1, 0x0, 0x8000000000000000, 'queue0\x00', 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xfdfdffff]}) 18:13:53 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2c0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:53 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r1, 0x2001000000035) sendfile(r0, r0, 0xfffffffffffffffe, 0x0) 18:13:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xfffffdfd]}) [ 2156.360037] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:55 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:13:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x8000a0ffffffff]}) 18:13:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x42400) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x1, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_INFO(r0, 0x40bc5311, &(0x7f0000000000)={0x1, 0x3, 'client0\x00', 0x6, "87d018e4bcc76f5f", "a0b8c9630f5911706f8e40166d209fc103abf451c9a063929083fd8269bc41bc", 0x0, 0x80000000}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) r2 = fcntl$dupfd(r0, 0x406, r0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000240)=0x4) tkill(r1, 0x1) 18:13:55 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2c8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2159.203424] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:55 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() timer_create(0x0, 0x0, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f0000000040)='/dev/full\x00', 0x8000, 0x0) ioctl$EVIOCSABS3F(r1, 0x401845ff, &(0x7f0000000080)={0x101, 0x9, 0x3f, 0x1, 0x1494, 0x8}) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) 18:13:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x8001a0ffffffff]}) 18:13:56 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2d0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2159.363713] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:56 executing program 0: pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[@ANYRES16], 0x2) syz_open_dev$loop(&(0x7f00000004c0)='/dev/loop#\x00', 0x0, 0x102) splice(r0, 0x0, r2, 0x0, 0x6, 0x0) 18:13:56 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:13:58 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x1f00000000000000]}) 18:13:58 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:13:58 executing program 0: r0 = socket(0x800000018, 0x2, 0x0) bind$unix(r0, &(0x7f0000000080)=@abs={0x1f95d27d48731892}, 0x1c) 18:13:58 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:58 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2d8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:58 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:13:59 executing program 0: setitimer(0x0, &(0x7f0000000040)={{}, {0x0, 0x2cd6}}, 0x0) setitimer(0x0, &(0x7f00000001c0), 0x0) 18:13:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xfdfdffff00000000]}) [ 2162.328943] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:13:59 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2e0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:13:59 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:13:59 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r0, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f00000000c0), 0x0) userfaultfd(0x0) 18:13:59 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:13:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xffffffffa0008000]}) [ 2162.608759] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:01 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:01 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:01 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2e8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:01 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:01 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0xffffffffa0018000]}) 18:14:01 executing program 0: [ 2165.386860] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:02 executing program 0: 18:14:02 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x1f00]}) 18:14:02 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2f0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:02 executing program 0: [ 2165.697518] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2165.736573] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x8000a0]}) 18:14:05 executing program 0: 18:14:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x2f8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:05 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:05 executing program 0: [ 2168.498096] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:05 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x8001a0]}) 18:14:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x300, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:05 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:05 executing program 0: [ 2168.786083] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:08 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000240)={@multicast1, @dev={0xac, 0x14, 0x14, 0x1e}, @multicast1}, 0xc) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:08 executing program 0: 18:14:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x1f000000]}) 18:14:08 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:08 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x308, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:08 executing program 0: 18:14:08 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2171.579668] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2171.638582] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:08 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xa0008000]}) 18:14:08 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:08 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x310, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:08 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, 0x0, &(0x7f0000000240)) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1, 0x81}, 0x1c) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0xeb, 0x42200) ioctl$NBD_DO_IT(r2, 0xab03) syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000800)=ANY=[@ANYBLOB=',dioread_lock,debug_want_extra_isize=0x0000000000008000,bsddf,inode_readahead_blks=0x0000000000000000,obj_role=securitytrusted,\x00']) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, &(0x7f00000001c0)='9p\x00', 0x800000, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'gre0\x00', 0xfff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x2, [0x4000000000, 0x401]}, &(0x7f0000000640)=0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000003c0)={0x100000000, 0x3, 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)=0xffffffff, 0x4) renameat(r3, &(0x7f0000000040)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000980)={'nat\x00'}, &(0x7f0000000940)=0xffffffffffffff1f) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x2) [ 2171.889971] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2171.945818] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2172.307518] overlayfs: filesystem on './file0' not supported as upperdir 18:14:11 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xa0018000]}) 18:14:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x318, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, 0x0, &(0x7f0000000240)) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1, 0x81}, 0x1c) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0xeb, 0x42200) ioctl$NBD_DO_IT(r2, 0xab03) syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000800)=ANY=[@ANYBLOB=',dioread_lock,debug_want_extra_isize=0x0000000000008000,bsddf,inode_readahead_blks=0x0000000000000000,obj_role=securitytrusted,\x00']) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, &(0x7f00000001c0)='9p\x00', 0x800000, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'gre0\x00', 0xfff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x2, [0x4000000000, 0x401]}, &(0x7f0000000640)=0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000003c0)={0x100000000, 0x3, 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)=0xffffffff, 0x4) renameat(r3, &(0x7f0000000040)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000980)={'nat\x00'}, &(0x7f0000000940)=0xffffffffffffff1f) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x2) [ 2174.615698] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xfdfdffff]}) 18:14:11 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x320, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:11 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:11 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2174.877291] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:11 executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = accept(r0, 0x0, &(0x7f0000000240)) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x4e21, 0x0, @mcast1, 0x81}, 0x1c) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000180)='trusted.overlay.nlink\x00', 0x0, 0x0, 0x0) r2 = syz_open_dev$adsp(&(0x7f0000000480)='/dev/adsp#\x00', 0xeb, 0x42200) ioctl$NBD_DO_IT(r2, 0xab03) syz_mount_image$ext4(0x0, &(0x7f0000000680)='./file0\x00', 0x0, 0x0, 0x0, 0x200000, &(0x7f0000000800)=ANY=[@ANYBLOB=',dioread_lock,debug_want_extra_isize=0x0000000000008000,bsddf,inode_readahead_blks=0x0000000000000000,obj_role=securitytrusted,\x00']) mkdir(&(0x7f0000000200)='./file1\x00', 0x0) symlink(&(0x7f0000000500)='./file0/f.le.\x00', &(0x7f0000000140)='.//ile0\x00') mount$overlay(0x400000, &(0x7f0000000300)='./file0\x00', &(0x7f0000000100)='overlay\x00', 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='upperdir=./file0,lowerdir=.:file0,workdir=./file1']) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) mount$9p_tcp(0x0, 0x0, &(0x7f00000001c0)='9p\x00', 0x800000, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000400)={'gre0\x00', 0xfff}) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000600)={0x0, 0x0, 0x2, [0x4000000000, 0x401]}, &(0x7f0000000640)=0xc) r3 = open(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) ioctl$VIDIOC_G_FREQUENCY(r3, 0xc02c5638, &(0x7f00000003c0)={0x100000000, 0x3, 0x3f}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f00000004c0)=0xffffffff, 0x4) renameat(r3, &(0x7f0000000040)='.//ile0\x00', r3, &(0x7f00000007c0)='./file0/f.le.\x00') openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000)='/dev/vga_arbiter\x00', 0x40, 0x0) ioctl$ION_IOC_ALLOC(0xffffffffffffffff, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) getsockopt$IP6T_SO_GET_INFO(r3, 0x29, 0x40, &(0x7f0000000980)={'nat\x00'}, &(0x7f0000000940)=0xffffffffffffff1f) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000040)=0x2) 18:14:11 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xfffffdfd]}) 18:14:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x328, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:14 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:14 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x8000a0ffffffff]}) 18:14:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet_udp(0x2, 0x2, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:14 executing program 0: open(&(0x7f0000000280)='./file0\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./file0\x00', 0x0) [ 2177.716287] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:14 executing program 0: r0 = openat$ion(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/ion\x00', 0x0, 0x0) ioctl$ION_IOC_ALLOC(r0, 0xc0184900, &(0x7f0000000000)={0x200000, 0xc04e27d3b503e3df, 0x0, 0xffffffffffffffff}) ioctl$DMA_BUF_IOCTL_SYNC(r1, 0x40086200, 0x0) 18:14:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x8001a0ffffffff]}) [ 2177.780385] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:14 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x330, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:14 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:14 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:14 executing program 0: write$UHID_SET_REPORT_REPLY(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYBLOB="34c7945fbcbb9000ff000ab660a00eafa5704713684205e7004822db700000771d7339a1f4774ada667bbb15144600a454f27c8486e7ddf076"], 0x1) clone(0x2102001ffc, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffffffffffff) r0 = gettid() wait4(0x0, 0x0, 0x80000000, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0x0) tkill(r0, 0x220000002c) ptrace$cont(0x18, r0, 0x0, 0x0) ptrace$setregs(0xd, r0, 0x0, &(0x7f0000000040)) ptrace$cont(0x1f, r0, 0x0, 0x0) 18:14:14 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x1f00000000000000]}) [ 2177.995504] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:17 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:17 executing program 0: r0 = openat$selinux_avc_cache_threshold(0xffffffffffffff9c, 0x0, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$cgroup_ro(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(r0, 0x8980, &(0x7f0000000100)={'hwsim0\x00', 0x8000}) getdents64(0xffffffffffffffff, 0x0, 0x0) ppoll(0x0, 0x0, &(0x7f0000000240)={0x77359400}, &(0x7f00000002c0), 0x8) syz_open_pts(0xffffffffffffffff, 0x8100) ioctl$KDSKBMETA(0xffffffffffffffff, 0x4b63, 0x0) r1 = perf_event_open(&(0x7f0000000040)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x0, 0x0) ptrace$pokeuser(0x6, 0x0, 0x0, 0x0) ioctl(0xffffffffffffffff, 0x0, 0x0) creat(0x0, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, 0x0) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQNSD(0xffffffffffffffff, 0x894b, &(0x7f0000000200)) r2 = syz_open_procfs(0x0, &(0x7f0000000340)='net/ip6_flowlabel\x00n\xc01\x14\x894X\xed\xc1\xc9\xd8\xdcK\r\x8d\xae\x98&@\xd0\xe6\xbbQ\xd7\xffYn\x1c\x92\xde\x0e\xaa1\x91\x98\xe9\x1f\nMCi|+\xcdw\xf0\x176Z\xf1`\xac\xf3;\xd6d2\xeb\xe5\f\x0e\x8b\xda\xf7\xfc9\xfe\xff4\xef\'\xa19q\x93\"\x7fG3\xc1E\xe6e6\xc6\xc2u\x11% \xe7+0\x97\x84;\\\xda\xc4\x80\xc3\xb18N\xbfY%\x05\xf8\x85\x89\xfc\xd2\xd7') sendfile(r1, r2, &(0x7f00000000c0)=0x202, 0xdd) 18:14:17 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x338, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xfdfdffff00000000]}) 18:14:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2180.815268] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xffffffffa0008000]}) 18:14:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:17 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x340, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:17 executing program 5: perf_event_open(0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) [ 2181.044689] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:17 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0xffffffffa0018000]}) 18:14:17 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2181.274276] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:20 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:20 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x348, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x1f00]}) 18:14:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) [ 2183.898189] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x8000a0]}) 18:14:20 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:20 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x350, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:20 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:20 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x8001a0]}) [ 2184.126458] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:23 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:23 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:23 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x1f000000]}) 18:14:23 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x358, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2186.993218] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xa0008000]}) 18:14:23 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:23 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x360, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:23 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:23 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:23 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xa0018000]}) [ 2187.322405] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:26 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:26 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:14:26 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x368, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:26 executing program 5: socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r0, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:26 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:14:26 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) [ 2190.094810] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. [ 2190.127584] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:26 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:26 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:26 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x370, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:27 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) [ 2190.363796] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:29 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:29 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:29 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:29 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x378, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) [ 2193.157029] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:29 executing program 0: r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:29 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 2193.202511] netlink: 22 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:29 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x0, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:30 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:30 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x380, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:30 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="0a0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:32 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:14:32 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="0f0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:32 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x388, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:32 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:32 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="180000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:32 executing program 0: r0 = syz_open_dev$dri(0x0, 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:32 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) 18:14:33 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:33 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x390, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:33 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:35 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) 18:14:35 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:35 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="250000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:35 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, 0x0, 0x0) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:35 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:35 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x398, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2199.311997] netlink: 13 bytes leftover after parsing attributes in process `syz-executor4'. 18:14:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:14:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:36 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x0, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:36 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="300000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:36 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3a0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:36 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) 18:14:36 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:38 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:38 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="5f0000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:38 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:38 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3a8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:38 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) 18:14:38 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:39 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="c00000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:39 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:39 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 18:14:39 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:39 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:42 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:42 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="230200003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:42 executing program 0: syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r0 = dup(0xffffffffffffffff) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 18:14:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380), 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3b8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:42 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:42 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}) 18:14:42 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="c00e00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:42 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3c0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:42 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:45 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:45 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="e03f03003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:14:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{0x0}], 0x1, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:45 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3c8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:45 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) dup(r0) ioctl$KVM_GET_ONE_REG(0xffffffffffffffff, 0x4010aeab, &(0x7f0000000000)={0x8}) 18:14:45 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:45 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="ee0000203000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:45 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3d0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:45 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 18:14:48 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) 18:14:48 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="00f0ff7f3000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 18:14:48 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3d8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, 0x0) preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:48 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) 18:14:48 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, 0x0) 18:14:48 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="effdffff3000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:48 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3e0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:48 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:51 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 18:14:51 executing program 0: r0 = syz_open_dev$dri(&(0x7f00000000c0)='/dev/dri/card#\x00', 0x1, 0x0) r1 = dup(r0) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000000)) 18:14:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000000a00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3e8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:51 executing program 0: perf_event_open(&(0x7f0000000180)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x3, &(0x7f0000001fd8)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x13, 0x5d}}, &(0x7f0000000000)='PL \x00L\xf7\xd1*\xf1\x1c\xe9%7\xb5\xe3\x19\x1ef\xde]N\xc1\x8eL-\xf0\x14\x84\xa8mw\x84/bIF\xea\xe3\x10yL\x8c\x96\xff\x14f#.%\x95\x119\xbd\xa5\xd2\x99\x0eR?\x8e\xc3\b\x0f\xfc\x12$\xd8\xdcL\x84\xa9\xc8\xe8\xab1Wh\x06qU#\xfat\x9e\x86\x15\xc6\x10I\xb8\xb1\xbej\xa7t\a\x02\xccZ\xdd', 0x5, 0x487, &(0x7f000000cf3d)=""/195}, 0x48) prctl$PR_SET_PDEATHSIG(0x1, 0xc) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000140)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="dde5d104bd8e2ef71d4fa3c951e2", 0x0, 0x51b3}, 0x28) 18:14:51 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(0xffffffffffffffff, &(0x7f0000000480), 0x10000000000002a1, 0x10400003) 18:14:51 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:14:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000000f00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:51 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3f0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2214.834904] audit: type=1400 audit(1548094491.487:85): avc: denied { prog_load } for pid=16787 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:14:51 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2215.042399] netlink: 26 bytes leftover after parsing attributes in process `syz-executor4'. [ 2215.277649] audit: type=1400 audit(1548094491.927:86): avc: denied { prog_run } for pid=16787 comm="syz-executor0" scontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tcontext=unconfined_u:system_r:insmod_t:s0-s0:c0.c1023 tclass=bpf permissive=1 18:14:54 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) 18:14:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, 0x0, 0x0, 0x10400003) 18:14:54 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x3f8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002300812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:54 executing program 0: 18:14:54 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, 0x0, 0x0, 0x10400003) 18:14:54 executing program 0: 18:14:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) 18:14:54 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002b00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:54 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:14:54 executing program 0: 18:14:57 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:14:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x408, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002d00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, 0x0, 0x0, 0x10400003) 18:14:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) 18:14:57 executing program 0: 18:14:57 executing program 0: 18:14:57 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:14:57 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000002e00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:14:57 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) 18:14:57 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x410, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:14:57 executing program 0: [ 2221.020826] netlink: 26 bytes leftover after parsing attributes in process `syz-executor4'. 18:15:00 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:00 executing program 5: r0 = socket$inet(0x2, 0x6000000000000001, 0x0) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @remote}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20000802, &(0x7f0000000040)={0x2, 0x404e23, @remote}, 0x10) bind$netlink(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl(r1, 0x1000008912, &(0x7f0000000140)="0a5c1f023c126285719070") r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f0000000080)=0x32, 0x4) getsockopt$IP_VS_SO_GET_TIMEOUT(r1, 0x0, 0x486, &(0x7f0000000180), &(0x7f00000001c0)=0xc) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) ioctl$sock_ifreq(r2, 0x8937, &(0x7f0000000100)={'veth0\x00', @ifru_settings={0x10001, 0x0, @fr=0x0}}) setsockopt$inet_group_source_req(r2, 0x0, 0xc, 0x0, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000140)='veth1_to_bridge\x00', 0x10) write$binfmt_elf32(r0, &(0x7f00000007c0)=ANY=[@ANYBLOB="7f454c467f00000000000000000000000000000000000000000000003800000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000f6ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002dfa08df3e87c8e4000000000000000000000000000000000000070000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000099cb176c0000000000000000000000000000000000000000000000e3ffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e00000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000e7ff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000900ff0000000000000000000000000000000000000000000000e8000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff7f0000000000000000ffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000f7ffffffffffffff0000000000000000000042ba3d1987b6032a1fe9f3bf33e16775b2de7d5511f30b589914ed13d7a640048afc6e367620fa6d83280fea392b519f311648cc5578c5156e427f82cadacef845dbd001a7ef9eb2df20eab1744456b97a7e7638ffb0697ac7a90b68d068c9c2c8721a1bbec14be0528fc5f6db7b30b0faec0a9aa522fc73f40dbaa177c847d1e40d22ed412c5fed53d62ee9d29b695d48be"], 0x5e2) getsockopt$XDP_MMAP_OFFSETS(0xffffffffffffffff, 0x11b, 0x1, &(0x7f0000000200), &(0x7f0000000280)=0x60) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, 0x0, 0x0) getsockopt$inet_mreq(r2, 0x0, 0x0, &(0x7f0000000000)={@remote, @broadcast}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, 0x0, 0x0) sendto$inet(r0, &(0x7f00000002c0)="8b", 0x1, 0x0, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='tunl0\x00\x00\x00\x00\x00\x00\x00\xe4\xa1\x00', 0x10) sendto$inet(r0, &(0x7f00000003c0), 0xfffffdef, 0x5940, 0x0, 0x0) 18:15:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 18:15:00 executing program 0: mknod(&(0x7f0000000000)='./bus\x00', 0x80008000, 0x801) openat(0xffffffffffffff9c, &(0x7f0000000100)='./bus\x00', 0x0, 0x0) 18:15:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0200003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x418, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0300003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:00 executing program 0: r0 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(0xffffffffffffffff, 0x28, 0x0, 0x0, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x40000000000, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ffe000/0x2000)=nil, 0x0) bind$inet6(r0, &(0x7f0000ef8cfd)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, &(0x7f0000000080)) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000340)=@sack_info={0x0, 0x8, 0xfbc}, &(0x7f0000000380)=0xc) listen(r0, 0x5) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) r3 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f000055bfe4)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, 0x0) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae67, &(0x7f0000000000)={0x0, 0x2000}) perf_event_open(0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) epoll_create(0x0) userfaultfd(0x0) epoll_create(0x100000001) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x5000000, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x54}, 0x98) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f00000001c0)={0x30, 0x5, 0x0, {0x0, 0x0, 0x3f, 0x4}}, 0x30) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r3, 0x84, 0x1a, &(0x7f0000000200)=ANY=[@ANYBLOB="5e0000008b6a40a6d4a053922bf127e0c78fd6c12d694701019508b30e0c2d331ac8b1c77627b20a68d1d84219d4ba40b1bc1a7fded7d8f378939c952f873c8cc2e492dc6eba41c41a89f4f573c1c76a65cd3b9538b52ece295795a851c09b6624c97df973b9b6ff2f2fc08993cac58f17"], 0x0) r4 = openat$zero(0xffffffffffffff9c, &(0x7f0000000140)='/dev/zero\x00', 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'veth0\x00', 0x8002}) socket$caif_seqpacket(0x25, 0x5, 0x0) 18:15:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 18:15:00 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0400003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:00 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x420, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:00 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}) [ 2224.267450] syz-executor5 (16894) used greatest stack depth: 18152 bytes left 18:15:03 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:03 executing program 5: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x0, 0x2) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f00000000c0)=0x10d060000) mmap(&(0x7f0000001000/0xa000)=nil, 0xa000, 0x0, 0x11, r0, 0x0) ioctl$SG_SET_RESERVED_SIZE(r0, 0x2275, &(0x7f0000000240)) 18:15:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0500003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:15:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x427, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:03 executing program 0: pipe(0x0) r0 = syz_open_dev$usb(&(0x7f00000000c0)='/dev/bus/usb/00#/00#\x00', 0x80000000007, 0x1000000040000001) ioctl$FS_IOC_FSGETXATTR(r0, 0x802c550a, &(0x7f0000000080)={0x2, 0x0, 0x0, 0x740000, 0xf7ffffff7ff0bdbe}) ioctl$SCSI_IOCTL_GET_PCI(r0, 0x4008550d, &(0x7f0000000100)) 18:15:03 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0600003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) r5 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1) 18:15:03 executing program 5: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffff7fffffffff0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) bind$rose(r1, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x0, 0x7, 0xfff, 0x8, 0x8}, &(0x7f0000000080)=0x98) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000003c0)={0xf006, "824cbb5d3a2968c43a948e8f3874b486071592fefb156190bba320a35f07389c", 0x1, 0x1}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x20, 0x2, 0x7}, &(0x7f0000000300)=0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @empty, 0x1000}}, 0x24) 18:15:03 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:15:03 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x428, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:03 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) r5 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1) 18:15:06 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:06 executing program 5: socket$rxrpc(0x21, 0x2, 0xa) r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={0x0}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) clock_getres(0xfffff7fffffffff0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) gettid() pipe2(&(0x7f0000000340)={0xffffffffffffffff}, 0x80000) bind$rose(r1, &(0x7f0000000380)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}]}, 0x40) r2 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/net/ipv4/vs/sync_retries\x00', 0x2, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffff9c, 0x84, 0xf, &(0x7f0000000240)={0x0, @in={{0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2b}}}, 0x0, 0x7, 0xfff, 0x8, 0x8}, &(0x7f0000000080)=0x98) ioctl$VIDIOC_ENUMAUDIO(r2, 0xc0345641, &(0x7f00000003c0)={0xf006, "824cbb5d3a2968c43a948e8f3874b486071592fefb156190bba320a35f07389c", 0x1, 0x1}) getsockopt$inet_sctp_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f0000000140)={r3, 0x20, 0x2, 0x7}, &(0x7f0000000300)=0x10) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(0x0, 0x0) bind$rxrpc(r1, &(0x7f0000000400)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e21, 0x2, @empty, 0x1000}}, 0x24) 18:15:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0700003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) 18:15:06 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x429, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) r5 = gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) tkill(r5, 0x1) 18:15:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0800003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:06 executing program 5: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0xb5, 0x10000) r1 = msgget$private(0x0, 0x28) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000000240)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in6=@loopback}}, &(0x7f0000000340)=0xe8) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000440)={{{@in=@loopback, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) r5 = getegid() ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000580)=0x0) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f00000005c0)=0x0) msgctl$IPC_SET(r1, 0x1, &(0x7f0000000600)={{0x3, r2, r3, r4, r5, 0x10, 0x3}, 0xffffffffffffffff, 0x3, 0xa0, 0x1ff, 0x4, 0x1, r6, r7}) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000140)={0x5, &(0x7f0000000080)=[{0x71f0, 0x0, 0xdef, 0x7fff}, {0x3ff, 0xfffffffffffffff8, 0x3, 0x4}, {0x6, 0x3f, 0x5, 0xfffffffffffffffc}, {0x5, 0x401, 0x6, 0x8001}, {0x3f, 0x1, 0x2d2b30cd, 0x7cc1}]}) r8 = socket(0x2000000000000021, 0x2, 0x2) sendmmsg(r8, &(0x7f0000005c00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2101000000000000100100000d00000000003fc308ab33f9495ccd8d060000009884175b57fd236c3fa46a489283c7c46b62d5e3b08c062d3d43ff2e7bb0052e918ee5bb3740f74e62fc02c3a37881dc99126ff5d18c12f9c7ca721940e022e782b3c0e691aa99a6fe5e0a1937a7698db0b7a08ac894e4633836fbd74cc3ad8d4908a061c865546bcf114aaf1e7e2f164861242d1a6bb0f12f3ae4dfa35d7bbd7d58cbf94a41276d605e95fd898e87e4c56bb7d314cc35f8d14627ca5cdb1a96a1b139ee80d744316173b588be82654bef7a65eceaefd6b76ae7e4cbbf387c060525de36778706d6818c3f2fb438b7095501b56986634636af64223316520409bfced4ff5200a80d33759a3d0f5d6a679d77560dde5de8e9a5066df59f6093be41"], 0x121}}], 0x1, 0x0) r9 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r9, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) perf_event_open(&(0x7f000001d000)={0x1, 0x70, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp={&(0x7f0000abe000)}}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r10 = socket$alg(0x26, 0x5, 0x0) r11 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000100)='/selinux/enforce\x00', 0x0, 0x0) setsockopt$inet6_MRT6_DEL_MFC(r11, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x0, 0x3ff, @mcast2, 0x1a}, {0xa, 0x4e22, 0xffffffff80000000, @empty, 0xf0000}, 0x9, [0x5, 0x5, 0x2000000, 0x0, 0x0, 0x8000, 0x1, 0x3]}, 0x5c) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpu.stat\x00', 0x0, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(0xffffffffffffff9c, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180), 0x0, 0xb}}, 0x20) openat(0xffffffffffffffff, &(0x7f0000000000)='./file0\x00', 0x0, 0x40) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000006c0)={'rose0\x00'}) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_RAWMIDI_IOCTL_PARAMS(r11, 0xc0305710, &(0x7f0000000280)={0x1, 0xac, 0x1, 0xffffffffffffffff}) sendmsg$nl_generic(r12, &(0x7f0000000080)={&(0x7f0000000480)={0x10, 0xbbf4, 0x1520010000000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c0000002200010000000000000000000400000008001100e2abb4004906b24d3dd4d7071b9b1bda3adc4b443651f765968f1af519200ec376b85a3f97eb22c5ce8f1bf6a9f85bbd0c5d5b23d3d10ae3a85ecf7b81af5bc36a535577deeaaa6a51b870ba264714f3c5201d68b7764f11bc924d213d13959c05f1a227666c76a7d927b11b345429a72ac564c966800ee658ccd0e763b1ebed27deda52541e87c0425854c1760cd101b680fe8ecc13e6c606d1505c2fadb270ffbd15f180144cd8baebf82687b04b3c70eaf6b84be099d7e1db045d8a5b1b358a1ce316481755d4901fc95851eae41dd83d88963f"], 0x1c}}, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r9, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r13 = gettid() timer_create(0x0, 0x0, 0x0) timer_create(0x2, &(0x7f0000000680)={0x0, 0xffffffff, 0x2000000000000004, @tid=r13}, &(0x7f0000000700)=0x0) timer_delete(r14) 18:15:06 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) 18:15:06 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) gettid() timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) 18:15:06 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x42b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:06 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0a00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:09 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) gettid() timer_create(0x0, 0x0, 0x0) 18:15:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 18:15:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0e00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:09 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x430, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:09 executing program 5 (fault-call:4 fault-nth:0): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) [ 2233.066437] FAULT_INJECTION: forcing a failure. [ 2233.066437] name failslab, interval 1, probability 0, space 0, times 0 [ 2233.085262] CPU: 0 PID: 17025 Comm: syz-executor5 Not tainted 5.0.0-rc3 #36 [ 2233.092389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2233.101751] Call Trace: [ 2233.104363] dump_stack+0x1db/0x2d0 [ 2233.108018] ? dump_stack_print_info.cold+0x20/0x20 [ 2233.113091] should_fail.cold+0xa/0x15 [ 2233.117014] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2233.122168] ? ___might_sleep+0x1e7/0x310 [ 2233.126342] ? arch_local_save_flags+0x50/0x50 [ 2233.130954] __should_failslab+0x121/0x190 [ 2233.135221] should_failslab+0x9/0x14 [ 2233.135240] __kmalloc+0x2dc/0x740 [ 2233.135256] ? __fget+0x472/0x710 [ 2233.135278] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2233.135296] ? rw_copy_check_uvector+0x28c/0x330 [ 2233.142637] rw_copy_check_uvector+0x28c/0x330 [ 2233.142662] ? rcu_read_unlock_special+0x380/0x380 [ 2233.142690] import_iovec+0xc1/0x2a0 [ 2233.142711] ? dup_iter+0x260/0x260 [ 2233.173265] vfs_readv+0xf5/0x1c0 [ 2233.176742] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 2233.182139] ? kasan_check_write+0x14/0x20 [ 2233.186398] ? __mutex_unlock_slowpath+0x195/0x870 [ 2233.191348] ? __fget_light+0x2db/0x420 [ 2233.195340] ? fget_raw+0x20/0x20 [ 2233.198813] ? check_preemption_disabled+0x48/0x290 [ 2233.203857] ? __sb_end_write+0xd9/0x110 [ 2233.207941] do_preadv+0x1c4/0x280 [ 2233.211494] ? do_readv+0x300/0x300 18:15:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:15:09 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0f00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2233.215148] ? __ia32_sys_read+0xb0/0xb0 [ 2233.219223] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2233.224600] ? trace_hardirqs_off_caller+0x300/0x300 [ 2233.229719] __x64_sys_preadv+0x9a/0xf0 [ 2233.233716] do_syscall_64+0x1a3/0x800 [ 2233.237622] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2233.242574] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2233.247617] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2233.252494] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2233.257695] RIP: 0033:0x458099 18:15:09 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) [ 2233.260899] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2233.279805] RSP: 002b:00007f14227d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2233.287527] RAX: ffffffffffffffda RBX: 00007f14227d7c90 RCX: 0000000000458099 [ 2233.287539] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000004 [ 2233.287548] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2233.287558] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14227d86d4 18:15:09 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) gettid() [ 2233.287568] R13: 00000000004c4aef R14: 00000000004d8170 R15: 0000000000000005 18:15:10 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) 18:15:10 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e1000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:12 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000400)={r4, 0x6}, 0x8) 18:15:12 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x438, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:12 executing program 5 (fault-call:4 fault-nth:1): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:15:12 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:15:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e4800003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2236.172426] FAULT_INJECTION: forcing a failure. [ 2236.172426] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 2236.184276] CPU: 1 PID: 17066 Comm: syz-executor5 Not tainted 5.0.0-rc3 #36 [ 2236.191379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.200739] Call Trace: [ 2236.203346] dump_stack+0x1db/0x2d0 [ 2236.206995] ? dump_stack_print_info.cold+0x20/0x20 [ 2236.212073] should_fail.cold+0xa/0x15 [ 2236.215987] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2236.221109] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2236.226674] ? check_preemption_disabled+0x48/0x290 [ 2236.231746] ? check_preemption_disabled+0x48/0x290 [ 2236.236787] ? debug_smp_processor_id+0x1c/0x20 [ 2236.241468] ? perf_trace_lock+0x12f/0x750 [ 2236.245706] ? perf_trace_lock_acquire+0x138/0x7d0 [ 2236.245723] ? check_preemption_disabled+0x48/0x290 [ 2236.245750] should_fail_alloc_page+0x50/0x60 [ 2236.245768] __alloc_pages_nodemask+0x323/0xdc0 [ 2236.245796] ? __alloc_pages_slowpath+0x2cc0/0x2cc0 [ 2236.245813] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2236.245849] ? ___might_sleep+0x1e7/0x310 [ 2236.255803] ? trace_hardirqs_off+0xb8/0x310 [ 2236.255828] cache_grow_begin+0x9c/0x8c0 [ 2236.255846] ? __sanitizer_cov_trace_const_cmp8+0x18/0x20 [ 2236.255864] ? check_preemption_disabled+0x48/0x290 [ 2236.255888] __kmalloc+0x67f/0x740 [ 2236.255904] ? __fget+0x472/0x710 [ 2236.255927] ? rw_copy_check_uvector+0x28c/0x330 [ 2236.255952] rw_copy_check_uvector+0x28c/0x330 [ 2236.255974] ? rcu_read_unlock_special+0x380/0x380 [ 2236.298848] import_iovec+0xc1/0x2a0 [ 2236.305865] ? dup_iter+0x260/0x260 [ 2236.305911] vfs_readv+0xf5/0x1c0 [ 2236.305949] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 2236.305971] ? kasan_check_write+0x14/0x20 [ 2236.305987] ? __mutex_unlock_slowpath+0x195/0x870 [ 2236.306010] ? __fget_light+0x2db/0x420 [ 2236.349507] ? fget_raw+0x20/0x20 [ 2236.352980] ? check_preemption_disabled+0x48/0x290 [ 2236.358028] ? __sb_end_write+0xd9/0x110 [ 2236.362153] do_preadv+0x1c4/0x280 [ 2236.365726] ? do_readv+0x300/0x300 [ 2236.369367] ? __ia32_sys_read+0xb0/0xb0 [ 2236.373443] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2236.378824] ? trace_hardirqs_off_caller+0x300/0x300 [ 2236.383948] __x64_sys_preadv+0x9a/0xf0 [ 2236.387942] do_syscall_64+0x1a3/0x800 [ 2236.391847] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2236.396795] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2236.401840] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2236.406718] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2236.411923] RIP: 0033:0x458099 18:15:12 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e21, @loopback}}, 0x8, 0x1, 0x1, 0x2, 0x1}, &(0x7f00000003c0)=0x98) 18:15:12 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e4c00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2236.415140] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2236.434052] RSP: 002b:00007f14227d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2236.441798] RAX: ffffffffffffffda RBX: 00007f14227d7c90 RCX: 0000000000458099 [ 2236.449089] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000004 [ 2236.456370] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2236.463690] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14227d86d4 [ 2236.470995] R13: 00000000004c4aef R14: 00000000004d8170 R15: 0000000000000005 18:15:13 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) 18:15:13 executing program 5 (fault-call:4 fault-nth:2): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:15:13 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) 18:15:13 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e6000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2236.679476] FAULT_INJECTION: forcing a failure. [ 2236.679476] name failslab, interval 1, probability 0, space 0, times 0 [ 2236.738151] CPU: 1 PID: 17086 Comm: syz-executor5 Not tainted 5.0.0-rc3 #36 [ 2236.745273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2236.754627] Call Trace: [ 2236.757249] dump_stack+0x1db/0x2d0 [ 2236.760921] ? dump_stack_print_info.cold+0x20/0x20 [ 2236.765975] should_fail.cold+0xa/0x15 [ 2236.769889] ? fault_create_debugfs_attr+0x1e0/0x1e0 [ 2236.775042] ? ___might_sleep+0x1e7/0x310 [ 2236.779214] ? arch_local_save_flags+0x50/0x50 [ 2236.779281] __should_failslab+0x121/0x190 [ 2236.779302] should_failslab+0x9/0x14 [ 2236.788125] kmem_cache_alloc_node_trace+0x270/0x720 [ 2236.788153] ? __might_fault+0x12b/0x1e0 [ 2236.788171] ? find_held_lock+0x35/0x120 [ 2236.788212] __kmalloc_node+0x3d/0x70 [ 2236.809041] kvmalloc_node+0x68/0x100 [ 2236.812862] seq_read+0x832/0x1130 [ 2236.812884] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2236.812913] ? seq_dentry+0x2d0/0x2d0 [ 2236.813000] proc_reg_read+0x29a/0x3c0 [ 2236.829678] ? proc_reg_unlocked_ioctl+0x3b0/0x3b0 [ 2236.829745] ? security_file_permission+0x94/0x320 [ 2236.829772] ? rw_verify_area+0x118/0x360 [ 2236.843754] do_iter_read+0x4a9/0x660 [ 2236.847570] ? dup_iter+0x260/0x260 [ 2236.851229] vfs_readv+0x175/0x1c0 [ 2236.854796] ? compat_rw_copy_check_uvector+0x3f0/0x3f0 [ 2236.860186] ? kasan_check_write+0x14/0x20 [ 2236.864440] ? __mutex_unlock_slowpath+0x195/0x870 [ 2236.869389] ? __fget_light+0x2db/0x420 [ 2236.873377] ? fget_raw+0x20/0x20 [ 2236.876845] ? check_preemption_disabled+0x48/0x290 [ 2236.882119] ? __sb_end_write+0xd9/0x110 [ 2236.886219] do_preadv+0x1c4/0x280 [ 2236.889777] ? do_readv+0x300/0x300 [ 2236.893413] ? __ia32_sys_read+0xb0/0xb0 [ 2236.897496] ? entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2236.902873] ? trace_hardirqs_off_caller+0x300/0x300 [ 2236.908004] __x64_sys_preadv+0x9a/0xf0 [ 2236.911996] do_syscall_64+0x1a3/0x800 [ 2236.915900] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2236.920846] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2236.925883] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2236.930749] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2236.935948] RIP: 0033:0x458099 [ 2236.939164] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2236.958075] RSP: 002b:00007f14227d7c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 2236.965793] RAX: ffffffffffffffda RBX: 00007f14227d7c90 RCX: 0000000000458099 [ 2236.973068] RDX: 10000000000002a1 RSI: 0000000020000480 RDI: 0000000000000004 [ 2236.980348] RBP: 000000000073bf00 R08: 0000000000000000 R09: 0000000000000000 [ 2236.987626] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f14227d86d4 [ 2236.994912] R13: 00000000004c4aef R14: 00000000004d8170 R15: 0000000000000005 18:15:15 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e6800003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) 18:15:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) removexattr(&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=@random={'system.', '/dev/input/mouse#\x00'}) 18:15:15 executing program 5 (fault-call:4 fault-nth:3): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:15:15 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x440, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:15 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x10000000000002a1, 0x0) 18:15:15 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() r3 = gettid() rt_tgsigqueueinfo(r2, r3, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:15 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 18:15:15 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e6c00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:16 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x448, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:16 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e7400003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:18 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:18 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(r2, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:18 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000002, 0x0) 18:15:18 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 18:15:18 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e7a00003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:18 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x450, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}) 18:15:19 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(r2, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:19 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000003, 0x0) 18:15:19 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2ef000003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:19 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x458, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:19 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:15:21 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0003003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:21 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(r2, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:21 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:21 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:15:21 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000004, 0x0) 18:15:21 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x459, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) 18:15:22 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0d04003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:22 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000005, 0x0) 18:15:22 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45a, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:22 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:22 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) 18:15:22 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0005003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:25 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000006, 0x0) 18:15:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 18:15:25 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:25 executing program 0: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r1, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) r2 = gettid() rt_tgsigqueueinfo(0x0, r2, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:25 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0006003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:25 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:15:25 executing program 0: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000080)=0xfc, 0x4) r1 = gettid() r2 = gettid() rt_tgsigqueueinfo(r1, r2, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:25 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000007, 0x0) 18:15:25 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0007003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:25 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45c, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:25 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000a003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:28 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:28 executing program 0: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x801) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000008, 0x0) 18:15:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) 18:15:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e040d003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:28 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45d, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:28 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) 18:15:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000e003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:28 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000009, 0x0) 18:15:28 executing program 0: syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:28 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000f003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:28 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45e, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:31 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:31 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0020003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000a, 0x0) 18:15:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:15:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x45f, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:31 executing program 0: gettid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0048003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:31 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) 18:15:31 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000b, 0x0) 18:15:31 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x460, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:31 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e004c003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:34 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:34 executing program 0: gettid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) 18:15:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000c, 0x0) 18:15:34 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x461, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0060003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:34 executing program 0: gettid() r0 = gettid() rt_tgsigqueueinfo(0x0, r0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:34 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 18:15:34 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0068003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:34 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000d, 0x0) 18:15:34 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x462, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:34 executing program 0: r0 = gettid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:37 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) 18:15:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e006c003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000e, 0x0) 18:15:37 executing program 0: r0 = gettid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:37 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x468, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:37 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0074003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:37 executing program 0: r0 = gettid() gettid() rt_tgsigqueueinfo(r0, 0x0, 0x32, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:37 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000000f, 0x0) 18:15:37 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}) 18:15:37 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x470, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:37 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, &(0x7f0000000240)={0x38, 0x101, 0x5c4}) 18:15:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:15:40 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e007a003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000010, 0x0) 18:15:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x478, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:40 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) 18:15:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00f0003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:40 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) 18:15:40 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:15:40 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000011, 0x0) 18:15:40 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x480, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:40 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000003f00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:40 executing program 0: r0 = gettid() r1 = gettid() rt_tgsigqueueinfo(r0, r1, 0x0, 0x0) 18:15:43 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000200)='/dev/snd/seq\x00', 0x0, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) 18:15:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000012, 0x0) 18:15:43 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:15:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x488, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000005f00812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0002003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) 18:15:43 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000013, 0x0) [ 2267.090107] libceph: connect [d::]:6789 error -101 [ 2267.096762] libceph: mon0 [d::]:6789 connect error [ 2267.121061] libceph: connect [d::]:6789 error -101 18:15:43 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x490, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2267.146190] libceph: mon0 [d::]:6789 connect error 18:15:43 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0003003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:43 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) [ 2267.565833] libceph: connect [d::]:6789 error -101 [ 2267.570907] libceph: mon0 [d::]:6789 connect error [ 2267.838270] libceph: connect [d::]:6789 error -101 [ 2267.843337] libceph: mon0 [d::]:6789 connect error 18:15:46 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x600000, 0x0) getsockopt$llc_int(r1, 0x10c, 0x1, &(0x7f0000000180), &(0x7f00000001c0)=0x4) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1800000000014) 18:15:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000014, 0x0) 18:15:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x498, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0004003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:15:46 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:15:46 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000015, 0x0) 18:15:46 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0005003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:46 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) [ 2270.190189] libceph: connect [d::]:6789 error -101 [ 2270.195697] libceph: mon0 [d::]:6789 connect error 18:15:46 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4a0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:47 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000016, 0x0) 18:15:47 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) [ 2270.564963] libceph: connect [d::]:6789 error -101 [ 2270.570574] libceph: mon0 [d::]:6789 connect error 18:15:49 executing program 3: r0 = dup3(0xffffffffffffffff, 0xffffffffffffff9c, 0x80000) ioctl$SNDRV_CTL_IOCTL_CARD_INFO(r0, 0x81785501, &(0x7f0000000380)=""/4096) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0xd0000, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x10, &(0x7f0000000280)={&(0x7f0000000200)=""/109, 0x6d, 0xffffffffffffffff}}, 0x10) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r2, 0x10, &(0x7f0000000300)={&(0x7f0000000180)=""/83, 0x53, r3}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r1, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) ioctl$VIDIOC_STREAMON(r0, 0x40045612, &(0x7f0000001380)=0x7fff) r4 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r4, 0x1800000000014) 18:15:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0006003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:15:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000017, 0x0) 18:15:49 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4a8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:49 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:15:49 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0007003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:49 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000018, 0x0) 18:15:49 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) [ 2273.290758] libceph: connect [d::]:6789 error -101 [ 2273.303945] libceph: mon0 [d::]:6789 connect error 18:15:50 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4b0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:50 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0008003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:50 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) 18:15:52 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000000240)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000080)={{0x0, 0x1c9c380}, {r2, r3+10000000}}, 0x0) tkill(r1, 0x1800000000014) r4 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x1ff, 0x0) openat$cgroup_int(r4, &(0x7f0000000180)='io.bfq.weight\x00', 0x2, 0x0) 18:15:52 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000019, 0x0) 18:15:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000a003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:52 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) 18:15:52 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4b8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:52 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, 0x0) 18:15:52 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000e003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001a, 0x0) 18:15:53 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0008000]}) [ 2276.298900] libceph: connect [d::]:6789 error -101 [ 2276.306867] libceph: mon0 [d::]:6789 connect error 18:15:53 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4c0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:53 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000f003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:53 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001b, 0x0) 18:15:55 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040)='/dev/rfkill\x00', 0x400, 0x0) getsockopt$netrom_NETROM_T1(r1, 0x103, 0x1, &(0x7f00000002c0), &(0x7f00000001c0)=0x4) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) clock_gettime(0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_settime(r1, 0x1, &(0x7f0000000240)={{0x77359400}, {r3, r4+30000000}}, &(0x7f0000000280)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1f) 18:15:55 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa0018000]}) 18:15:55 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0010003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:55 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001c, 0x0) 18:15:55 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4c8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:55 executing program 0: pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$nbd(0xffffffffffffffff, 0x0, 0x4) close(r0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) socketpair$unix(0x1, 0x4000000000000005, 0x0, &(0x7f0000000140)) write$P9_RLERROR(0xffffffffffffffff, 0x0, 0x0) getsockname$inet6(0xffffffffffffffff, 0x0, 0x0) geteuid() setsockopt$inet6_tcp_TLS_RX(r0, 0x6, 0x2, &(0x7f00000000c0), 0x4) 18:15:56 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0048003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001d, 0x0) 18:15:56 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:56 executing program 0: r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='attr/fscreate\x00') pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f00000001c0), 0xfffffef3) sendto$inet(0xffffffffffffffff, &(0x7f0000000500), 0x0, 0x20008084, 0x0, 0x0) write$P9_RXATTRCREATE(0xffffffffffffffff, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/netfilter\x00') r3 = fcntl$getown(r2, 0x9) ptrace$setregs(0xffffffffffffffff, r3, 0x2, 0x0) geteuid() read(r1, &(0x7f0000000a80)=""/250, 0x97851d132b8385c) fcntl$F_GET_RW_HINT(0xffffffffffffffff, 0x40b, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x0) ioctl$EVIOCGBITSND(r1, 0x80404532, &(0x7f0000002c80)=""/4096) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x8, 0x8010, 0xffffffffffffffff, 0x0) ioctl$BINDER_GET_NODE_DEBUG_INFO(r2, 0xc018620b, &(0x7f0000000340)={r5}) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sched_setscheduler(0x0, 0x4000000000000006, 0x0) ioctl$sock_ifreq(r1, 0x0, 0x0) getpid() connect$inet(r4, &(0x7f0000000480)={0x2, 0xfffffffffffffffe, @multicast1}, 0x10) fsetxattr$security_evm(r2, 0x0, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], 0x1, 0x2) fsetxattr$trusted_overlay_redirect(r2, &(0x7f00000000c0)='trusted.overlay.redirect\x00', 0x0, 0x0, 0x2) openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080)='/selinux/policy\x00', 0x0, 0x0) getresgid(&(0x7f0000000180), &(0x7f0000000400), &(0x7f0000000040)) getsockopt$IP_VS_SO_GET_SERVICE(0xffffffffffffffff, 0x0, 0x483, 0x0, &(0x7f00000007c0)) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/ppp\x00', 0x40001, 0x0) recvfrom$inet(r6, &(0x7f0000000380)=""/45, 0x2d, 0x0, &(0x7f00000002c0)={0x2, 0x0, @loopback}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0x0) write$P9_RCREATE(r0, &(0x7f0000000000)={0xfffffffffffffdfa}, 0x18) 18:15:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff]}) 18:15:56 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4d0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:56 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e004c003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x100000000000001e, 0x0) 18:15:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffdfd]}) 18:15:56 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0060003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:56 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4d8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:56 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000021, 0x0) 18:15:56 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0ffffffff]}) 18:15:56 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0068003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2280.453427] SELinux: Context úýÿÿs is not valid (left unmapped). 18:15:59 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) r2 = openat$selinux_status(0xffffffffffffff9c, &(0x7f0000000040)='/selinux/status\x00', 0x0, 0x0) setsockopt$IP_VS_SO_SET_EDITDEST(r2, 0x0, 0x489, &(0x7f0000000180)={{0x1, @rand_addr=0x100000001, 0x4e24, 0x2, 'ovf\x00', 0x33, 0x80000000, 0x21}, {@local, 0x4e22, 0x10007, 0x20, 0x4, 0x80000000}}, 0x44) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:15:59 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4e0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0ffffffff]}) 18:15:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000022, 0x0) 18:15:59 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e006c003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:59 executing program 0: r0 = syz_open_procfs(0x0, &(0x7f0000000000)='io\x00') write$P9_RMKDIR(0xffffffffffffffff, 0x0, 0x0) r1 = gettid() utimes(0x0, 0x0) timer_create(0x0, &(0x7f0000044000)={0x0, 0x12}, &(0x7f0000000040)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x9}}, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) getpeername$unix(0xffffffffffffffff, 0x0, 0x0) write$P9_RLINK(r0, 0x0, 0x0) tkill(r1, 0x1000000000016) 18:15:59 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0074003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:15:59 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00000000000000]}) 18:15:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000023, 0x0) 18:15:59 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4e8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:15:59 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000024, 0x0) 18:15:59 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e007a003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:16:02 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r1 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x29, 0x6, @thr={0x0, 0x0}}, 0x0) ioctl$BLKTRACETEARDOWN(r0, 0x1276, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x20, 0x3, 0x8, 'queue1\x00', 0x5}) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r1, 0x1800000000014) 18:16:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfdffff00000000]}) 18:16:02 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') 18:16:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000025, 0x0) 18:16:02 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e00f0003000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:16:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4f0, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:16:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000026, 0x0) 18:16:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0008000]}) 18:16:02 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000033000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) [ 2285.863530] libceph: connect [d::]:6789 error -101 [ 2285.869442] libceph: mon0 [d::]:6789 connect error 18:16:02 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x4f8, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:16:02 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffa0018000]}) 18:16:02 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000027, 0x0) [ 2286.634962] libceph: connect [d::]:6789 error -101 [ 2286.641299] libceph: mon0 [d::]:6789 connect error [ 2286.649279] libceph: connect [d::]:6789 error -101 [ 2286.654311] libceph: mon0 [d::]:6789 connect error 18:16:05 executing program 3: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffff9c, 0x8903, &(0x7f0000000200)=0x0) ptrace$getenv(0x4201, r1, 0x5, &(0x7f0000000240)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0xc0605345, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000]}) r2 = gettid() timer_create(0x0, &(0x7f0000000140)={0x0, 0x0, 0x0, @thr={0x0, 0x0}}, 0x0) timer_create(0x7, &(0x7f0000000500)={0x0, 0x3d, 0x0, @thr={&(0x7f0000000400)="45198ad46f12243e8c623279af2565580acb9e7f055d65da48204628ec01f7331773a75e96e7b8921f656cb645c5667b96f2ac9b387c8fdd07054f7a5b7fc87a130deaff2484c074479a5e98007da534e7bf401a308e7c", &(0x7f0000000480)="6f510a058b0750d414bd7d80a80f7be8a84b7f5c454cd19ddc0b13fc8b1b7889230df3465ff907856ebe0e065fc0737db68aff0025ba77c62dd85ecbeb0fab7d00cc23cd58bca276c3e02fd5a69b32f8a85c6a311510a222f19f0bead9989c8fec4a"}}, &(0x7f0000000540)=0x0) timer_settime(r3, 0x0, &(0x7f00000003c0)={{0x0, 0x1c9c380}, {0x0, 0x1c9c380}}, 0x0) tkill(r2, 0x1800000000014) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000280)='/dev/ubi_ctrl\x00', 0xc200, 0x0) accept4$bt_l2cap(r4, &(0x7f00000002c0), &(0x7f0000000300)=0xe, 0x80800) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040)='/dev/sequencer2\x00', 0x28000, 0x0) write$P9_RLCREATE(r5, &(0x7f0000000180)={0x18, 0xf, 0x2, {{0x90, 0x0, 0x7}, 0x4}}, 0x18) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r5, 0x84, 0x1d, &(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000380)=0x18) ioctl$SIOCGETNODEID(r5, 0x89e1, &(0x7f00000001c0)={0x2}) 18:16:05 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e000d043000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:16:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x500, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) 18:16:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00]}) 18:16:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000028, 0x0) 18:16:05 executing program 0: perf_event_open(&(0x7f0000000140)={0x2, 0x70, 0x3e7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10000003, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000027000)='./file0\x00', 0x0) mount(&(0x7f0000000040)=@nullb='[d::]:/llb:\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='ceph\x00', 0x0, &(0x7f0000000140)='\x00') 18:16:05 executing program 4: r0 = socket$kcm(0x10, 0x4000000002, 0x10) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000000c0)="2e0000053000812de45ae087185082cf0200b0eba06ec4000023000000000800000000000000000051894dd65b2f", 0x2e}], 0x1}, 0x0) 18:16:05 executing program 5: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f000001b000)={@multicast2, @remote, @loopback}, 0xc) preadv(0xffffffffffffffff, &(0x7f0000001380)=[{&(0x7f0000001200)=""/148, 0x94}], 0x100000c7, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter\x00') preadv(r1, &(0x7f0000000480), 0x1000000000000029, 0x0) [ 2288.909099] libceph: connect [d::]:6789 error -101 [ 2288.935112] libceph: mon0 [d::]:6789 connect error [ 2288.947037] WARNING: CPU: 0 PID: 17856 at net/ceph/messenger.c:3073 clear_standby+0x12f/0x160 [ 2288.956016] Kernel panic - not syncing: panic_on_warn set ... [ 2288.961931] CPU: 0 PID: 17856 Comm: syz-executor0 Not tainted 5.0.0-rc3 #36 [ 2288.969042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 2288.978414] Call Trace: [ 2288.981029] dump_stack+0x1db/0x2d0 18:16:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000a0]}) [ 2288.984693] ? dump_stack_print_info.cold+0x20/0x20 [ 2288.989757] ? clear_standby+0x30/0x160 [ 2288.993816] panic+0x2cb/0x65c [ 2288.997040] ? add_taint.cold+0x16/0x16 [ 2289.001052] ? clear_standby+0x12f/0x160 [ 2289.005160] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2289.005412] kobject: 'loop1' (0000000062c9b128): kobject_uevent_env [ 2289.010887] ? __probe_kernel_read+0x1f4/0x250 [ 2289.010921] ? __warn.cold+0x5/0x48 [ 2289.010955] ? clear_standby+0x12f/0x160 [ 2289.010977] __warn.cold+0x20/0x48 18:16:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8001a0]}) [ 2289.011002] ? clear_standby+0x12f/0x160 [ 2289.026675] kobject: 'loop1' (0000000062c9b128): fill_kobj_path: path = '/devices/virtual/block/loop1' [ 2289.029670] report_bug+0x263/0x2b0 [ 2289.029759] do_error_trap+0x11b/0x200 [ 2289.029791] do_invalid_op+0x37/0x50 [ 2289.058030] ? clear_standby+0x12f/0x160 [ 2289.062117] invalid_op+0x14/0x20 [ 2289.065603] RIP: 0010:clear_standby+0x12f/0x160 18:16:05 executing program 2: r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) r1 = open(&(0x7f0000000440)='./bus\x00', 0x141042, 0x0) ftruncate(r1, 0x2007fff) fcntl$setstatus(r0, 0x4, 0x44000) io_setup(0x2, &(0x7f0000000000)=0x0) io_submit(r2, 0x508, &(0x7f0000000540)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, r0, &(0x7f0000000000), 0x200a00}]) [ 2289.070287] Code: de e8 b5 77 bb f9 48 85 db 0f 84 39 ff ff ff e8 07 76 bb f9 0f 0b e9 2d ff ff ff e8 ab 67 ff f9 e9 67 ff ff ff e8 f1 75 bb f9 <0f> 0b eb a5 e8 b8 67 ff f9 e9 f6 fe ff ff 4c 89 ef e8 ab 67 ff f9 [ 2289.089209] RSP: 0018:ffff8880328af6d0 EFLAGS: 00010216 [ 2289.094594] RAX: 0000000000040000 RBX: ffff8880965358a8 RCX: ffffc90005e6f000 [ 2289.100367] kobject: 'loop2' (00000000b0812315): kobject_uevent_env [ 2289.101876] RDX: 000000000001dfc6 RSI: ffffffff87c688ff RDI: 0000000000000007 [ 2289.101890] RBP: ffff8880328af6e8 R08: ffff88808aeb6100 R09: ffffed1012ca6b46 [ 2289.101903] R10: ffff8880328af6e8 R11: ffff888096535a2f R12: 0000000000000001 [ 2289.101916] R13: ffff8880965359e0 R14: ffff8880328af798 R15: ffff888096535a28 [ 2289.101965] ? clear_standby+0x12f/0x160 [ 2289.102000] ceph_con_send+0x450/0x610 [ 2289.115761] kobject: 'loop2' (00000000b0812315): fill_kobj_path: path = '/devices/virtual/block/loop2' [ 2289.122944] ? ceph_msg_new+0x40/0x40 [ 2289.122985] ? __sanitizer_cov_trace_const_cmp1+0x1a/0x20 [ 2289.123020] __send_prepared_auth_request+0x155/0x1b0 [ 2289.123046] __open_session+0x3d9/0x570 [ 2289.173631] ceph_monc_open_session+0x1a2/0x360 [ 2289.178342] __ceph_open_session+0xe2/0x7e0 18:16:05 executing program 1: r0 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r0, 0x408c5333, &(0x7f00000000c0)={0x0, 0x0, 0x0, [0x0, 0x0, 0x1f000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f000000]}) [ 2289.182699] ? bdi_register_va+0x4c/0x80 [ 2289.186794] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2289.192360] ? ceph_destroy_client+0x1a0/0x1a0 [ 2289.196971] ? kill_block_super+0x100/0x100 [ 2289.201386] ? ceph_put_super+0x70/0x70 [ 2289.205385] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2289.210948] ? ns_capable_common+0x141/0x170 [ 2289.215419] ceph_mount+0x10d2/0x1c80 [ 2289.219268] ? ceph_compare_super+0x510/0x510 [ 2289.223793] ? m_stop+0x20/0x20 [ 2289.227098] ? selinux_sb_eat_lsm_opts+0x5da/0x6e0 [ 2289.232082] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2289.237653] mount_fs+0x123/0x43a [ 2289.241139] ? emergency_thaw_all+0x260/0x260 [ 2289.245686] ? lock_release+0xc40/0xc40 [ 2289.249703] vfs_kern_mount.part.0+0xdb/0x570 [ 2289.254242] ? may_umount+0xb0/0xb0 [ 2289.257893] ? _raw_read_unlock+0x2d/0x50 [ 2289.262061] ? __get_fs_type+0x9a/0xd0 [ 2289.265994] do_mount+0x58e/0x3330 [ 2289.269558] ? rcu_pm_notify+0xd0/0xd0 [ 2289.273482] ? copy_mount_string+0x40/0x40 [ 2289.277755] ? kmem_cache_alloc_trace+0x354/0x760 [ 2289.282646] ? __sanitizer_cov_trace_const_cmp4+0x16/0x20 [ 2289.288211] ? copy_mount_options+0x30e/0x440 [ 2289.292746] ksys_mount+0xdb/0x150 [ 2289.296317] __x64_sys_mount+0xbe/0x150 [ 2289.300325] do_syscall_64+0x1a3/0x800 [ 2289.304242] ? syscall_return_slowpath+0x5f0/0x5f0 [ 2289.309203] ? prepare_exit_to_usermode+0x232/0x3b0 [ 2289.314258] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 2289.319165] entry_SYSCALL_64_after_hwframe+0x49/0xbe [ 2289.324379] RIP: 0033:0x458099 [ 2289.327592] Code: 6d b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b b7 fb ff c3 66 2e 0f 1f 84 00 00 00 00 [ 2289.328460] kobject: 'loop4' (000000001fca4d34): kobject_uevent_env [ 2289.346506] RSP: 002b:00007f812d221c78 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2289.346526] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 0000000000458099 [ 2289.346538] RDX: 0000000020000100 RSI: 0000000020000080 RDI: 0000000020000040 [ 2289.346551] RBP: 000000000073bf00 R08: 0000000020000140 R09: 0000000000000000 [ 2289.346563] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f812d2226d4 [ 2289.346575] R13: 00000000004c3df1 R14: 00000000004d6da8 R15: 00000000ffffffff [ 2289.354067] Kernel Offset: disabled [ 2289.401619] Rebooting in 86400 seconds..