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", 0x1000}, {&(0x7f0000000340)="504f66e5269bed981eb29484dc38e5fe9ef2fd1b5ac42bbc40526ed451639d2b6f9a4e974e4e1d3c81f0581c835e90882295490dc3b744c44bc890023779f62b6d4e9d5ad8eef27fa7f363eb54befb809ba6418e4ee8bb4bf24e1631417f7e964f6f4bfcf062159875d98579858c76cbb09fd4da1ae591d7a8595a2d062a4b6aa3ac642a535bb6b539e837af7e404b7684a1c15e4d94a6ccbbbe8b0f8190f273a2b8786066ad1f1110eefcc60993266818b23743d25a443149e258ad11fa8f7f797758e21c66b2f307763b5a6d", 0xcd}, {&(0x7f0000000440)="1e17a7e9a59b68c8e4f9e4a497f55872807a80ad5b357147a29afe1c775a", 0x1e}], 0x4, &(0x7f00000004c0)=[@init={0x18, 0x84, 0x0, {0x100, 0x20, 0xed76, 0x5}}, @init={0x18, 0x84, 0x0, {0x7fffffff, 0x8, 0x1ff, 0x8}}, @init={0x18, 0x84, 0x0, {0x9, 0x7fff, 0x401, 0x4}}, @sndrcv={0x30, 0x84, 0x1, {0xcb3, 0x7, 0x0, 0x9, 0x401, 0x1, 0xd3ac, 0x800, r2}}, @sndinfo={0x20, 0x84, 0x2, {0xdf5d, 0x800c, 0xffffffffffffff81, 0x1f, r2}}, @init={0x18, 0x84, 0x0, {0x8001, 0x80000000, 0x0, 0x9}}], 0x120, 0x200008c0}, 0x40) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0xffffffffffffd8f1, 0x8001, 0x8, 0x7, r2}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000000280)=ANY=[@ANYRES32=r2, @ANYBLOB="10000000"], &(0x7f00000002c0)=0x8) 2033/05/18 03:35:18 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:18 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f", 0x76}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:18 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair(0x10, 0x5, 0x6, &(0x7f0000000080)) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:18 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:18 executing program 3: r0 = syz_open_dev$random(&(0x7f0000001000)='/dev/random\x00', 0x0, 0x0) select(0x40, &(0x7f0000000000)={0x0, 0x7, 0x6, 0xfffffffffffffffb, 0x5, 0x7, 0x8000, 0x1}, &(0x7f0000000140)={0xde88652, 0x1f, 0x8, 0x8ac1, 0xffffffffffffff33, 0xfffffffffffffff7, 0x2, 0x8}, &(0x7f0000000080)={0x0, 0x401, 0x3, 0x3f, 0x0, 0x683, 0x7fffffff, 0x20}, &(0x7f0000000100)) poll(&(0x7f00000000c0)=[{r0, 0xfffffffffffffffd}], 0x1, 0x0) 2033/05/18 03:35:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="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", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r4, 0xc02c5341, &(0x7f0000000300)) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:18 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x2b0) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="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"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103eec891551b26db10be6fff83cdd6d3d2ad0e2d48808d30f0f820715335f3e25a0524fca528652765173dc88abf0add7c1b99fcd280a664b33eecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a04f4cd3bf165a5d842b7c495f79a7caf0c66c360bce9e6a020a1dc15a44192d632c02b4ee99597f555e1c762ecd4f0535ab78433c25e8591865cb6fff0ec8f7c1608fa55b23ef6"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:18 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0xb}, 0xffa7) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:18 executing program 3: r0 = socket(0x10, 0x20000000000003, 0x0) getsockopt$sock_int(r0, 0x1, 0xb, &(0x7f0000000000), &(0x7f0000000080)=0x4) 2033/05/18 03:35:18 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:18 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 175.096688] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:18 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f", 0x76}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:18 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffff9c) ioctl$KVM_SET_TSC_KHZ(r0, 0xaea2, 0x5) clone(0x200, &(0x7f0000b6b000), &(0x7f0000744000), &(0x7f0000fef000), &(0x7f0000000040)) mknod(&(0x7f0000000280)='./file0\x00', 0x1040, 0x0) r1 = openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000)='/proc/self/net/pfkey\x00', 0x4181c3, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) r3 = syz_open_procfs(r2, &(0x7f0000000100)='net/wireless\x00') pread64(r3, &(0x7f00009f3000), 0x352, 0x0) getpid() r4 = syz_open_dev$audion(&(0x7f0000003a80)='/dev/audio#\x00', 0x0, 0x2) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500)='/dev/infiniband/rdma_cm\x00', 0x2, 0x0) getsockopt$inet_udp_int(r4, 0x11, 0x65, &(0x7f00000002c0), &(0x7f0000000300)=0x4) write$rdma_cm(r5, &(0x7f00000039c0)=ANY=[@ANYBLOB="f3af3454d676a847bc4ddc12bd18ab4b631a5c1a85b3a3bf49bd820462efa326b3b4c0316d3d7cab3a81eae27d793682f00f6db787e696793c0b52097b845c0335c18fa2f9eedd4284c66c71b086abaf084c433417b5b0cb0409f33ada09accbd6a11eb1cb"], 0x65) ioctl$TIOCGPGRP(r4, 0x540f, &(0x7f0000000080)=0x0) write$rdma_cm(r5, &(0x7f0000005580)=@create_id={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000005540), 0x106}}, 0x20) r7 = perf_event_open(&(0x7f000025c000)={0x0, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xfffffffffffffffe) add_key(&(0x7f00000000c0)='big_key\x00', &(0x7f0000000100)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000140)="0f", 0x1, r8) io_setup(0x9, &(0x7f0000000340)=0x0) io_cancel(r9, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x7, 0x0, r7, &(0x7f0000000380)="4ba33a3b16c136614dc237efedeb1cf885c1e98ac851e2d7606bf79231166350a51982b8e047675299b40d642f20aa7156d298ee269801bc8814b3bd7f48fcdf8c332be5a5daa4f1967cc1dfed51290f89d3b9a53012b2b2e927ee02e83ba595e7bd8be48dd80c094f7cdcb5af935ecfa226f85babd2c1f1c33ab4bf2e933342434c18dc774e87ecd1a5382b6495d3cc9c86a0d3f8094e44b5ad12572f6cc74e0757bdc47eb903242acc7044840e997fa0e71965e852f4845913d4c22d8f2308f6b62ca328ed3422a3a32ce9da791207c6a22d48d44524302e809b1a", 0xdc, 0x1000, 0x0, 0x0, r4}, &(0x7f00000004c0)) r10 = dup2(r7, r4) sched_getscheduler(r6) read(r3, &(0x7f0000000080)=""/93, 0x5d) ioctl$TUNSETVNETBE(r3, 0x400454de, &(0x7f0000003bc0)) openat$kvm(0xffffffffffffff9c, &(0x7f0000017000)='/dev/kvm\x00', 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000001580)=[{&(0x7f0000000340)=""/186, 0xba}, {&(0x7f0000000400)=""/4096, 0x1000}, {&(0x7f0000001400)=""/147, 0x93}, {&(0x7f00000014c0)=""/181, 0xb5}], 0x4, 0x0, 0x0, 0x9}, 0x74f}, {{&(0x7f00000015c0)=@hci, 0x80, &(0x7f00000016c0)=[{&(0x7f0000001640)=""/91, 0x5b}], 0x1, &(0x7f0000001700)=""/55, 0x37, 0x81}, 0x207e9a87}, {{&(0x7f0000001740)=@in6={0x0, 0x0, 0x0, @ipv4={[], [], @remote}}, 0x80, &(0x7f0000001940)=[{&(0x7f00000017c0)=""/214, 0xd6}, {&(0x7f00000018c0)=""/111, 0x6f}], 0x2, &(0x7f0000001980)=""/87, 0x57, 0x2}, 0x10001}, {{&(0x7f0000001a00)=@nfc_llcp, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001a80)=""/247, 0xf7}, {&(0x7f0000001b80)=""/219, 0xdb}, {&(0x7f0000001c80)=""/186, 0xba}], 0x3, &(0x7f0000001d80)=""/18, 0x12, 0x6}, 0x4}, {{&(0x7f0000001dc0)=@ax25, 0x80, &(0x7f0000003080)=[{&(0x7f0000001e40)=""/144, 0x90}, {&(0x7f0000001f00)=""/4096, 0x1000}, {&(0x7f0000002f00)=""/75, 0x4b}, {&(0x7f0000002f80)=""/50, 0x32}, {&(0x7f0000002fc0)=""/136, 0x88}], 0x5, &(0x7f0000003100), 0x0, 0x3}, 0x20}, {{&(0x7f0000003140)=@in={0x0, 0x0, @dev}, 0x80, &(0x7f00000033c0)=[{&(0x7f00000031c0)=""/191, 0xbf}, {&(0x7f0000003280)=""/177, 0xb1}, {&(0x7f0000003340)=""/112, 0x70}], 0x3, &(0x7f0000003400)=""/216, 0xd8, 0x1f}, 0x3}, {{&(0x7f0000003500)=@ax25, 0x80, &(0x7f0000003680)=[{&(0x7f0000003580)=""/158, 0x9e}, {&(0x7f0000003640)=""/47, 0x2f}], 0x2, &(0x7f00000036c0)=""/194, 0xc2, 0x800}, 0x9}], 0x7, 0x40000000, &(0x7f0000003980)={0x77359400}) ioctl$KVM_ARM_SET_DEVICE_ADDR(r10, 0x4010aeab, &(0x7f0000000200)={0x8000, 0x3000}) eventfd2(0x4, 0x1) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$inet_udp_int(r1, 0x11, 0x0, &(0x7f0000003100)=0x93, 0x4) 2033/05/18 03:35:18 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r4 = memfd_create(&(0x7f0000001740)="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", 0x1) r5 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r5, &(0x7f0000001440)={0x9a2}, 0x8) write$rdma_cm(r3, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYPTR=&(0x7f00000032c0)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="0601090000000000"], 0x20) write$rdma_cm(r3, &(0x7f0000003340)=ANY=[@ANYBLOB="16000000980000fa", @ANYPTR=&(0x7f0000000140)=ANY=[@ANYRES32=0xffffffff], @ANYBLOB="00fffffffffffff0", @ANYRES32=r6, @ANYBLOB="1000000002004e21e0000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000"], 0xa0) inotify_init1(0x80000) r7 = dup2(r5, r4) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000606d859392be0119e8a09cf6a8b6db875d986bc6e85fecc314d7cb243683f326e619167ec06a8243b7b4", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r4, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) setsockopt$inet6_mtu(r2, 0x29, 0x17, &(0x7f0000000040)=0x6, 0x4) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) [ 175.163283] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:18 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = getpid() userfaultfd(0x0) sched_setattr(r0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x3}, 0x0) ptrace$setopts(0x4206, r0, 0x0, 0xffffc) userfaultfd(0x0) r1 = syz_open_dev$sndseq(&(0x7f0000000000)='/dev/snd/seq\x00', 0x0, 0x8000000000102) r2 = dup2(r1, 0xffffffffffffffff) write$sndseq(r2, &(0x7f0000000180), 0x0) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000280)={0x0, 0x8}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) syz_open_dev$sndseq(&(0x7f0000ce9ff3)='/dev/snd/seq\x00', 0x0, 0x0) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) r4 = openat$ion(0xffffffffffffff9c, &(0x7f00004b1000)='/dev/ion\x00', 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000001fc8)={0x0, 0x0, &(0x7f0000003000), 0x0, &(0x7f0000002000)=ANY=[@ANYBLOB="00816b6d96f6eca30f000000000000"], 0xf}, 0x0) ioctl(r4, 0xc0184900, &(0x7f0000002000)) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) creat(&(0x7f00000000c0)='./control\x00', 0xb3) clone(0x0, &(0x7f0000290000), &(0x7f0000186ffc), &(0x7f0000b8e000), &(0x7f0000a5e000)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000001c0), &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x5}, 0xc) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) signalfd4(0xffffffffffffffff, &(0x7f0000000180)={0x40}, 0x8, 0x80800) r5 = creat(&(0x7f0000000440)='./control\x00', 0x101) ioctl$FIONREAD(r5, 0x541b, &(0x7f0000604ffc)) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000380)={0x0, 0x7, 0x10000, 0x9, 0x1f, 0x1e5e, 0x0, 0x9, {0x0, @in={{0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x100000000, 0x6, 0x7f, 0x5, 0x3ff}}, &(0x7f00000002c0)=0xb0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000500)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0xffffffff, 0x2, 0x7fffffff, 0x7fff, 0x1}, &(0x7f0000000300)=0x98) syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r6 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r6, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) 2033/05/18 03:35:18 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r2, 0x28, &(0x7f0000000080)}, 0x10) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) r3 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0)='fou\x00') sendmsg$FOU_CMD_DEL(r1, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x44, r3, 0x14, 0x70bd28, 0x7ba, {0x2}, [@FOU_ATTR_TYPE={0x8, 0x4}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e24}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0xaf}, @FOU_ATTR_PORT={0x8, 0x1, 0x4e23}, @FOU_ATTR_IPPROTO={0x8, 0x3, 0x33}, @FOU_ATTR_TYPE={0x8, 0x4, 0x3}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x40000) 2033/05/18 03:35:18 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:18 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:18 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f", 0x76}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x100000000) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) [ 175.296123] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000000340), 0x84000) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="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", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000380)=ANY=[@ANYBLOB="0100000000000000", @ANYBLOB="8000ed07f2e00ff1e4c58d45c0b382095ea7adbb07d795bc3eac5e32000000000000000012f679d8900d633ca3d4a098f71521e0f7ea9f15fe7fe526406d68fa84b60ee950386fc330fe1744f865867049ca62db0c490d74fc39cd4eeab062033a0be101bfc3dd349e13d604f245aa6ec40e"]) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x800a, 0x7fff) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:19 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x10000, 0x0) accept(0xffffffffffffff9c, &(0x7f0000000800)=@nfc_llcp, &(0x7f0000000880)=0x80) r2 = accept(r0, 0x0, &(0x7f0000000940)) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000740)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r5 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r8 = fcntl$dupfd(r1, 0x0, r5) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r7, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000007c0)={r10, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r9}) r11 = dup2(r1, r6) dup3(r1, r3, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000500)={r12, 0x6}, 0x8) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446", 0x78}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:19 executing program 3: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000000180)={0x2, 0x70, 0x3b4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x0, 0x0, r0, 0x0) close(r1) 2033/05/18 03:35:19 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r2, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r1, 0x0, 0x3, &(0x7f0000000080)=0x8, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) open_by_handle_at(r2, &(0x7f0000000180)=ANY=[@ANYBLOB="b300000002000000029a841eef58fc430a1e5f2b438b604831d1f3d3e9f48b2b067e5f2a5967860d3c84f719a40c701800245468dca7bfb812d1ced0734109b57bed7789a2aa2484b64dd37e0eebf9ddb4da458777cbe893442d0c008e00b52033b318cab8f6c7d867fe6d48d30e7c27027e21f92cbd73a38657669b0a398c814d5f5f01223b41d556f2a6453b35ace86e945460680792e00393e0c3b0f69c53a16ff8267f812cd677abaf82037e93dfa54644"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 3: r0 = openat$rfkill(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rfkill\x00', 0x40, 0x0) syz_open_dev$audion(&(0x7f0000000140)='/dev/audio#\x00', 0x2, 0x24100) ioctl$VT_RESIZEX(r0, 0x560a, &(0x7f0000000100)={0x0, 0xffffffffffffff4a, 0x0, 0x8001, 0x6, 0x66cfd7ad}) r1 = syz_open_dev$adsp(&(0x7f0000000000)='/dev/adsp#\x00', 0xd39b, 0x80000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000080)=[{0x3, 0x5}, {0xa, 0x2667}], 0x2) ioctl$KDDELIO(r1, 0x4b35, 0x8) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) fallocate(r2, 0x0, 0x0, 0x10001) r3 = open(&(0x7f00000001c0)='./bus\x00', 0x81, 0x80000000000001) sendfile(r3, r2, 0x0, 0xd7c3) lseek(r2, 0x0, 0x4) ioctl$sock_netrom_SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000180)) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 175.475178] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446", 0x78}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) semget$private(0x0, 0x1, 0x0) socketpair$inet(0x2, 0x80000, 0x21, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_HMAC_IDENT(r1, 0x84, 0x16, &(0x7f00000001c0)=ANY=[@ANYBLOB="a5165115f191181269fdb2040000000100040002000100"], &(0x7f0000000180)=0xc) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) r3 = getpid() ioprio_get$pid(0x1, r3) 2033/05/18 03:35:19 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 175.546415] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446", 0x78}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) setsockopt$inet_mtu(r1, 0x0, 0xa, &(0x7f0000000080)=0x2, 0x4) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r3 = memfd_create(&(0x7f0000001740)="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", 0x1) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r4, &(0x7f0000001440)={0x9a2}, 0x8) r5 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xb63}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r5, 0x84, 0x1a, &(0x7f0000000340)={r6, 0xe3, "5dd3f03f9e875312937074c22d9a8e01e9f3d1b7990d2e786a4f05fbcf7bf3cd422356467bfb3af932d80983e7f99a66f1e8258dceece6e91ff55cb7c627ba13fde5678f3baed40759e3ace5e311af10122b38d7c4cd66d29b45f2eaa5a106e049f7ea85b5dff52772b279ba608554085c6bf5fc8bb4234c85661eab582f3c490cf30ecf14944b221bd49ffc05599e3c40617989f4488092e60bfb60a8581235ec4a4aeae5759f85c4dba2de5bd88eab9fed8a3a4f62146cb5f0f007b346e18962018327f9199c973b16950bfae4b8dcb3ab48ac9d1331df9d0bf7da6e53cc30e6b003"}, &(0x7f0000000440)=0xeb) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r3, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:19 executing program 1: preadv(0xffffffffffffffff, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r1, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r6 = fcntl$dupfd(r0, 0x0, r3) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1183d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd300a664b23cecb03610cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8f330d79ee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000007c0)={r8, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r7}) r9 = dup2(r0, r4) dup3(r0, r1, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000500)={r10, 0x401}, 0x8) 2033/05/18 03:35:19 executing program 3: mkdir(&(0x7f0000935000)='./file0\x00', 0x0) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000343ff8)='./file0\x00', &(0x7f0000000040)='tmpfs\x00', 0x0, &(0x7f0000000080)="1252e5adbee2b1d6cd437d6e6cefd11812856fc798d6a91d91abeb02d2cfbaad65be565bafa7597a7031147a2c32") ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffff9c, 0x89e2, &(0x7f00000000c0)={0xffffffffffffffff}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100)='tls\x00', 0x4) r1 = socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce71ab49d1af9241b6ff71a60f36c8dbf3aeb024dbb593f5c479a0ce2ba6149a08bcbed27e91476387a930bf1d5f51ac0daccdb30b60193e6aaec45421e35ba2c75799919fda445c64de2abb9aca7a301a69b2d1374f6a596eb596f8eb66f7b8cb438528c6dd17cea4749a24caf7f7c4f80cb36aefe345625353", 0xf2}], 0x1) r2 = eventfd2(0x0, 0x0) r3 = getpid() sched_setattr(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r4 = userfaultfd(0x0) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000480)={0xaa}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000043fe0)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x20}) getuid() stat(&(0x7f00000020c0)='./control\x00', &(0x7f0000002100)) geteuid() getgroups(0x2, &(0x7f0000002840)=[0xffffffffffffffff, 0x0]) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000023c0)={{{@in=@local, @in=@remote}}, {{@in=@local}, 0x0, @in=@local}}, &(0x7f00000024c0)=0xe8) stat(&(0x7f0000002500)='./control\x00', &(0x7f0000002540)) lstat(&(0x7f00000025c0)='./control/file0\x00', &(0x7f0000002600)) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002680), &(0x7f00000026c0)=0xc) sendmsg$unix(0xffffffffffffffff, &(0x7f0000002800)={&(0x7f0000001e80)=@abs, 0x6e, &(0x7f0000002080)=[{&(0x7f0000001f00)="1d68998bff41e9cec14275b93a9dcdde8d7bf05cfcf70cdc910a42896e67572bd86d3fe345b06abee2aa28ecc2ce511615fbcd2736198918d2f5251a35998642e75f272bdff1f5e040ae36a1a786e404c112ee634184c98d9e3ecdeeb9c13236ab522a824e1328afe8f4d64de2c2de929427cb9c0ecbfe2c013f251e0e495de9ba203effe794dd474220224397cfaf5046a194ee0570e714315de68697019fca0c8d4464c5d61e2f2577d0537c665150f56a00c5e01496efef02ab592c054f2490971bce", 0xc4}], 0x1, &(0x7f0000000180)=[@rights={0x30, 0x1, 0x1, [r0, r0, r1, r0, r4, r2, r1, r2]}], 0x30, 0x4000000}, 0x40) r5 = creat(&(0x7f0000000000)='./control/file0\x00', 0x0) set_mempolicy(0x2000000002, &(0x7f00000000c0)=0x1, 0x1f) mmap(&(0x7f0000000000/0x709000)=nil, 0x709000, 0xfffffffffffffffd, 0x44031, 0xffffffffffffffff, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='net/rt_acct\x00') write$sndseq(r5, &(0x7f0000011fd2)=[{0x0, 0x0, 0x0, 0x0, @time, {}, {}, @time=@time={0x77359400}}], 0x30) rename(&(0x7f0000000040)='./control/file0\x00', &(0x7f0000000080)='./file0\x00') 2033/05/18 03:35:19 executing program 6: r0 = openat$rtc(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/rtc\x00', 0x4201, 0x0) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000200)={0x1, 0x1, [@random="9dbb9372d489"]}) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vcs\x00', 0x4200, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/119) ioctl$KVM_GET_ONE_REG(r1, 0x4010aeab, &(0x7f0000000140)={0x9, 0x100000000}) syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) fcntl$getflags(r0, 0x40b) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r3 = syz_open_dev$loop(&(0x7f0000000300)='/dev/loop#\x00', 0x1, 0x0) ioctl$TUNSETPERSIST(r1, 0x400454cb, 0x0) sendfile(r3, r1, &(0x7f00000002c0)=0x1f, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) ioctl$TUNSETVNETBE(r1, 0x400454de, &(0x7f0000000000)) 2033/05/18 03:35:19 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 175.720159] tmpfs: No value for mount option 'Rå­¾â±ÖÍC}nlïÑ…oǘ֩‘«ëÒϺ­e¾V[¯§Yzp1z,2' [ 175.724911] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x70, 0x1e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmmsg(r1, &(0x7f00000009c0)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="a2cd0a0b9522d40ef33a35d13d35a8f420f421e8a54686d8e5ac122db63f014d23e49ec4eecfa9c24d97d4e62d6e94e79a4fe676f5f63923054ff6b041ed94caf3cdc918866fc3cb53682a95b41ac4c4d06cc52558f9", 0x56}, {&(0x7f0000000340)="d646347aa56c71ef9a1768df4a93273f1143b423e699990117a9178da97ddec9bc22dad12fd98bf6072008288b8c8424946fd7c7e41bd9df1f27aa6894271a9046199001a390ab642b4a31d1d59b1644814b608a34bf057f050633a3933325b41e1d3475421924e213d24a1c5de13f656c936b893994f9dd009c5ef090913411fdac12108ffcf34dec41817a40ef6e244311557167fca159cf079f6f6ccb58e916ce30587e00c73611d3cab2dc05d0a780ec751c5b67a49acea9d201f9ae2bc32ebb269abac0e4caeb2e0f49ea686c4dc2040e63183e3383bd01c45eac2698bc", 0xe0}], 0x2, &(0x7f0000000440)=[{0x78, 0x119, 0x5, "d407957645104031a09589133ad27f42f1c0d7ef597acc40c5336fad369859b30a8af59dcc9c11562f41bde36c1fcbb1d721054ede1064905f07d79895461ea5e8474b565748c1b445627b39781ad963cc2354a396bebff99240f4bb3416987d95f7e4639c597f"}, {0x78, 0x29, 0xfff, "e7a0596aa47dd9ef82bd1afae5ed4d67f530b786506e54f6f38cb2ad9f7f4aae33e2f39dd4d335c0c2d5d41ebff86ff6e0c279e82f3ac774e67b9661a4197c6647b3d662b7b24a516fdb2c63482516e4fb1f9170720a6c645dcad626858b959f2c81"}, {0xc0, 0x103, 0x7, "e4cdbd147ee0e0d7bfc09c1325f7ac7094a1f53c43bbfb0754b6d8eca17a50c9af51625a6c67dd6fbaa06ea4f247a1be2b2c0ac48c502bbd2a637a80934ee0b507dd8bd81495e5e393af9d7efbdb64cd2bba42595011cd8278ae3f0d6f430a0751bd8fa0a7cbc89c75e44bbdcd9cbf32e42c949bdf816f5ba63e71f533f7462c46e3f2ea3ce71ff6ffe955aeac04b98ca1dcbed58eecc439e28efa48b69911ab54da9ba68e8a27b29d1fc764738984d4"}], 0x1b0, 0x24008040}, 0x1}, {{&(0x7f0000000600)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e23, @local={0xac, 0x14, 0x14, 0xaa}}, 0x3, 0x2, 0x4, 0x4}}, 0x80, &(0x7f0000000180)=[{&(0x7f0000000680)="efe13297ebb94a0aaf3daea5e84c86883fdea970a2e877df91ed666580f5a25db9aa4d42be4ea5b3f1de84d1d12b10184598b1161c362cb1e03e19a9273fe942d31fd14ec0ce26c451f33deaf8eca4ba7eb391f5dee7ca", 0x57}, {&(0x7f0000000700)="aba9a080d5e837e9af5fdade85863f58149eba4a573fe0a550fc3a032cc1bc5e8f868611574ca3c6c808151b3cc73f87fd0bb9dbbf60289654bb4b009b3055c77f9cd7df077f463119ab88d4b3c12c409ac23faf881d5a3b51e655e648cb2bb9604b39bd3c059a05317606b1bcacdc6837172d7fcf3b0b1ecaf369fabbe1219d07af8ea7841a67fa036e3783eb5e7ac817365c07ddad0bceb88c785d1f71faadca8936c25800685cbc633d8dd8d6b9d6f7d99f9c316ac672e9c720e453ae7ac2368e1df9de40123bed7e28ba511c59d22ec23a9a40b87731d86a46b2b52e682cd90dbf9845118cafa63ccb92827ee08742f6ccf379afc46e", 0xf8}, {&(0x7f0000000800)="f765a5c94655c16548575c496f91a5381c8b7e134b30f2a265aee3b192e7ce7c1cee5d65661718d53ace6f4feb503af1f27647e8bcc4b2455f73b3d29c6d75196b7087a3a4ae419d795ecd0702e6c280c5108cec5b12f1e3165872565ffc39f63760e948a70fd44a", 0x68}], 0x3, 0x0, 0x0, 0x8000}, 0xfffffffffffffff1}, {{&(0x7f0000000880)=@nfc={0x27, 0x0, 0x2, 0x7}, 0x80, &(0x7f0000000980)=[{&(0x7f0000000900)="6cfa3e02f78704d93c517d44452184da7b619340e76021bfd27e71c7018c0bb4e2669870944b4eec0b36349058847e78f11214b196fee31c62fd6c7417a1030fbaee9b36fc3ab6af996e689c98", 0x4d}], 0x1, &(0x7f0000001300)=[{0xa8, 0x6, 0x3, "8374d036a45ff2ebd95a6c2ca092d349c7a072bf513d9df0655c349039b2b9abff0a15a90538b4fdd19ea6a1ce54b0afaf798404664e95dde5894d3a15db05025da4399658225a50406b3d34113b6a941056449ce9a666df88958301500e28a3f8c8fadd5c6d9e5cf5a6bc3fc4da3a964bf497ec2c9566038886b577b75facdae9e407bb9263eb41aa400e5b13d5bce728"}, {0x20, 0x0, 0x6, "d224a10f556ff3b72734"}, {0x1010, 0x113, 0x2, "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"}, {0xe8, 0x11f, 0x5, "a535311bf329e562ccee71ab6e71138e78c0fea62dd26a536888ba3d93ba7e291bdbb01a940a55d379bda7251d4c7b60eed7bdf7f17c9a7eb4ced4db41628b23ab8876e579b900f6f43398d29e96dd0bb2cb3098d51a0b774525efd4dc5c95cb654b781b9f543d167af0ee7723a426c914d5c57197b79b61373db7d24915f36c392b475d81f05f0c853698e12f7eff31cf8be35dce65326d595ff8ab6f0d9b2948b09d2a1c449450f91a20719a7709e2792fb9cfc211912b4301cfa9c14e9af20b20577d504730e2d736734de191c07a1a3225"}], 0x11c0, 0x10}, 0x100000001}], 0x3, 0x814) r2 = timerfd_create(0x9, 0x0) timerfd_settime(r2, 0x0, &(0x7f0000016fe0)={{0x5}, {0x0, 0x5f6c}}, &(0x7f000000ffe0)) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockopt$inet6_mreq(r1, 0x29, 0x10, &(0x7f0000000280)={@ipv4={[], [], @multicast1}, 0x0}, &(0x7f0000000200)=0xfffffffffffffedf) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r4, 0x1, 0x6, @random="deca0eef73b8"}, 0x10) ioctl$DRM_IOCTL_AGP_ALLOC(r1, 0xc0206434, &(0x7f0000000b00)={0x80, 0x0, 0x0, 0x9}) ioctl$DRM_IOCTL_AGP_BIND(r1, 0x40106436, &(0x7f0000000ac0)={r5, 0x8}) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(r3, 0x4c01) msgget$private(0x0, 0x109) ioctl$KVM_SIGNAL_MSI(r1, 0x4020aea5, &(0x7f0000000080)={0x3000, 0x2, 0x0, 0x8, 0x7fff}) 2033/05/18 03:35:19 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) ioctl$KVM_GET_PIT2(r1, 0x8070ae9f, &(0x7f00000000c0)) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000280)="aa8e7225c61a63c48519e155f27d20c49a00a4fa3f4b385634dd004eab37a55cd3d0622cb2c4723d868681af54b2cff4cc36afd106d85348d1200637a29c2cd39c755bc4c4e0aa9c90e9398fe341da1f4ad2aa92a0b579a55382e6b5d80962eae1d1c17e7b728369d2d1151e24bf88f2aa7fb669f172512ac3ab63ee32fcecf7a80fa8ef7d359a98df6b55d6fb6e266c0f3813cb310cabc161f6985909d991b7775f28769cf969f1ce8a12d4be61f4dd7b92fb3a17eb0fda7d9c73d4705e0db057994243a58c7b683f49eee20eeaee8139fe63f1a297b2f54f103f470ff0cc63d8beec1a817c19e86186de703a9f01000000000000003159957c739f101d74c4", 0x28d}], 0x1, 0x81006) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000080)={0xf000, 0x1000}) poll(&(0x7f0000000040)=[{r3, 0x40}, {r0, 0x1000}, {r3, 0x8590}], 0x3, 0x401) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 3: futex(&(0x7f000000cffc), 0x80000000000b, 0x4, &(0x7f0000edfff0)={0x77359400, 0x4}, &(0x7f0000048000), 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) futex(&(0x7f000000cffc), 0xc, 0x1, &(0x7f0000b7dff0), &(0x7f0000048000), 0x0) r0 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f0000000000)='/dev/qat_adf_ctl\x00', 0x80, 0x0) ioctl$KVM_GET_REGS(r0, 0x8090ae81, &(0x7f00000000c0)) r1 = syz_open_procfs(0x0, &(0x7f0000000c40)="2f65786500000000000409004bddd9de91be10eebf000ee9a90f798058439ed554fa07424adee901d2da75af1f0200f5ab26d7a071fb35331ce39c5a") ioctl$DRM_IOCTL_RES_CTX(r1, 0x40086607, &(0x7f0000000080)={0x0, &(0x7f0000000540)}) getpid() finit_module(r1, &(0x7f0000000040)="4873656c66136d643573756d262e2300", 0x1) sendmsg(r1, &(0x7f00000006c0)={&(0x7f0000000200)=@ethernet={0x307, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x80, &(0x7f0000000580)=[{&(0x7f0000000280)}], 0x1, &(0x7f00000001c0)=ANY=[], 0x0, 0x40000}, 0x4054) r2 = request_key(&(0x7f0000000940)='pkcs7_test\x00', &(0x7f0000000980)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000009c0)='\x00', 0xfffffffffffffffb) r3 = add_key(&(0x7f0000000a00)='pkcs7_test\x00', &(0x7f0000000a40)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000a80)="e1dae2c73e2bffe2f71c0a66caa7b20c16bbd61e73004b83ad7edabf11005c84e88ff77b8f05ff72a7cd6a88e26526e2587956b8a4cc99d881026acd6779533e440d3f30747a628eb3b4d0a6490b1b3578bf674e49c55453b37f2df5db16b6da4e9805ab6b6b28eff90a4bddf1efb11283af71601133864600d9bc7f5c510dd5e8a8907f2f3c6666649f581a97ec18b395777f36c302a0b5f93fcb75328fddf21dca9bfe8554c687ea6f29066e5b513fbf38f96449fb7eb1e321c185017443105cc451040de80fb4a60b7aa8d5b1a1911986b9447bc898413cec0a259416d987c2d76beeddd26e5f701542e0ebac8ea5d68d", 0xf2, 0xfffffffffffffff9) keyctl$reject(0x13, r2, 0x2, 0x3, r3) gettid() getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000280)={{{@in6=@mcast2, @in=@broadcast}}, {{@in=@remote}, 0x0, @in6=@ipv4={[], [], @local}}}, &(0x7f0000000380)=0xe8) lstat(&(0x7f00000004c0)='./file0\x00', &(0x7f0000000500)) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000005c0)={0x0, 0x0, 0x0}, &(0x7f0000000600)=0xc) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000c80)={'filter\x00', 0x7, 0x4, 0x480, 0x118, 0x0, 0x258, 0x398, 0x398, 0x398, 0x4, &(0x7f0000000b80), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x15}, @broadcast=0xffffffff, 0xffffff00, 0xffffffff, @mac=@local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}, {[0x0, 0x0, 0x0, 0xff]}, @empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}, 0x9, 0x1, 0x70, 0x6, 0x0, 0x200, 'syz_tun\x00', 'ip6gre0\x00', {0xff}}, 0xf0, 0x118}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x7, 0xc3b2, 0x2}}}, {{@arp={@dev={0xac, 0x14, 0x14, 0x14}, @empty, 0x0, 0x0, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}, @empty, {[0xff, 0xff, 0xff, 0xff, 0xc9a273adb3c67079, 0xff]}, 0x9, 0xff, 0x2, 0x6, 0xff, 0x9, 'bcsh0\x00', 'bcsf0\x00', {}, {}, 0x0, 0x200}, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac, @mac=@broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast1=0xe0000001, @multicast1=0xe0000001, 0x8, 0xffffffff}}}, {{@uncond, 0xf0, 0x140}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@remote={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xbb}, @empty, @dev={0xac, 0x14, 0x14, 0x1a}, @dev={0xac, 0x14, 0x14, 0x16}, 0x1, 0x1}}}], {{[], 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x4d0) stat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setresgid(0x0, r5, r6) setfsuid(r4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f00000001c0)=ANY=[@ANYBLOB="0604566e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0], &(0x7f0000000400)=0x4) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000440)={0x0, 0x96, 0x8}, &(0x7f0000000480)=0x8) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000680)={r0}) pwrite64(r7, &(0x7f0000000780)="3db6364926913b824d9bac2e690f8c4c77ad96fe79cbec6db673932df76776ca1f2d8fd5a41c8fd82a5f13de82bf6eb4d503ac73d0600d0acde30fd440e1b989d02df62ed0d802bee712df288b96aa83f06a621719f5c6bec19f72c8c1c2915a934d76d531b7791326c6bf755b9e2680505d1aa6de8c2ba0868bed7a8b80513c8af41386f4c9fa3e3da85f643877eabb047f44d42718aeab11cfe346e4b5", 0x9e, 0x0) connect$llc(r0, &(0x7f00000003c0)={0x1a, 0x204, 0x5, 0x6, 0x3, 0x65681059, @local={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0xaa}}, 0x10) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000bc0)={'security\x00'}, &(0x7f0000001180)=0x54) bpf$OBJ_PIN_MAP(0x6, &(0x7f0000000900)={&(0x7f00000008c0)='./file0\x00', r0}, 0x10) accept4$inet(r1, &(0x7f0000000840)={0x0, 0x0, @remote}, &(0x7f0000000880)=0x10, 0x800) ioctl$KVM_S390_INTERRUPT_CPU(r1, 0x4010ae94, &(0x7f0000000180)={0x7712, 0x2, 0x8}) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 175.829068] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r4 = memfd_create(&(0x7f0000001740)="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", 0x1) r5 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) ioctl$RNDADDENTROPY(r4, 0x40085203, &(0x7f0000000140)={0x7, 0x22, "2c0bfda6273fa213d3f66496bf941e7c6eff5e918111b1ee995733699c0fdb915fda"}) signalfd(r5, &(0x7f0000001440)={0x9a2}, 0x8) r6 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r6, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r4, 0x4008af03, &(0x7f0000000400)=ANY=[@ANYBLOB="010000000000000000f01000000000100010000000000000", @ANYBLOB="34c1ac85940c5d1c28691225efd7909f5bcf260e7c43a0b4154ac871967e9500067495c012076fed82605d68c3a9a4"]) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) recvfrom$ipx(r4, &(0x7f0000000480)=""/58, 0x3a, 0x40, &(0x7f00000004c0)={0x4, 0x3f, 0xa22e, "120831a84f55", 0xc7e3}, 0x10) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r6, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r4, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) recvfrom(r2, &(0x7f0000000300)=""/87, 0x57, 0x2001, &(0x7f0000000380)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x4e21, @rand_addr=0x6b05}, 0x0, 0x4, 0x3, 0x1}}, 0x80) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x4, @local={0xfe, 0x80, [], 0xaa}, 0x2}, 0x1c) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000080)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) open(&(0x7f00000000c0)='./file0\x00', 0x80200, 0x2) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000002180)=[{&(0x7f0000000300)=""/37, 0x25}, {&(0x7f00000006c0)=""/77, 0x4d}, {&(0x7f0000000940)=""/211, 0xd3}, {&(0x7f0000000f80)=""/4096, 0x1000}, {&(0x7f0000000ac0)=""/114, 0x72}, {&(0x7f0000001f80)=""/246, 0xf6}, {&(0x7f0000002080)=""/200, 0xc8}], 0x7, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0xffffffffffffffff) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff02000000000074c8a20e0000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000002200)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r8, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r7}) r9 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000500)={r10, 0x6}, 0x8) [ 175.938891] QAT: Invalid ioctl [ 175.951217] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0xfffffffffffffe79) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:19 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000002, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0)='IPVS\x00') pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$TIOCGSID(r2, 0x5429, &(0x7f0000000500)=0x0) lstat(&(0x7f0000000540)='./file0\x00', &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x1, &(0x7f0000000600)=[r5]) sendmmsg$unix(r2, &(0x7f0000000880)=[{&(0x7f00000003c0)=@abs={0x1, 0x0, 0x4e22}, 0x6e, &(0x7f00000004c0)=[{&(0x7f0000001300)="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", 0x1000}, {&(0x7f0000000440)="e7ad57af88b2417d23f9aba15a18e5c116d9f2316244b169206a11b4193740ff42957fbdd50be65e3cdcbd15e1b506803c7b80e7080716a6e2e2a3b102330580d0c80881830a1f4263b65f265dae01c41cbf4674ea6a1a", 0x57}], 0x2, &(0x7f0000000640)=ANY=[@ANYBLOB="30000000000000000100000001000000", @ANYRES32=r0, @ANYRES32=r1, @ANYRES32=r1, @ANYRES32=r2, @ANYRES32=r1, @ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0000000020000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=r4, @ANYRES32=r6, @ANYBLOB='\x00\x00\x00\x00'], 0x50, 0x4010}, {&(0x7f00000006c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000840)=[{&(0x7f0000000740)="24d21513ac1a2db512d69625375dfbb1621ec8f0968b0803592fcc42909001f76f21ad21569fb44526d5e7a8a4b3781e36639940a12333e95bc1d882a92340371ad4c3d288f6b7a884b6f8", 0x4b}, {&(0x7f00000007c0)="2b4d0669b48c0c15838c1d00a60b729e414cd7f55389f36447629968e7ffdca901fa84aeb2ee51233893500f774cd11b74e4e8bb6ab39c2315c0ee04f2d2c060e65fbb16501505cef03e4fcaa85817a0d5bebd84174133d8bebaea066c1d4e43ab35826e666acce3d641", 0x6a}], 0x2, 0x0, 0x0, 0x20000000}], 0x2, 0x800) finit_module(r2, &(0x7f0000000200)='/dev/vcsa#\x00', 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) getsockopt$inet_buf(r2, 0x0, 0x2a, &(0x7f0000000900)=""/32, &(0x7f0000000940)=0x20) ioctl$LOOP_CLR_FD(r1, 0x4c01) stat(&(0x7f0000000b00)='./file0\x00', &(0x7f0000000cc0)) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)={0x8, 0x0, 0x4, 0x0, 0x1, 0x8f, 0x6, 0x1f, 0x40, 0xca8d, 0x1c, 0x2, 0x0, 0x3, 0x200, 0x1000, 0x362d, 0x1b, 0x2}) msgget$private(0x0, 0x10) ioctl$LOOP_SET_DIRECT_IO(0xffffffffffffffff, 0x4c08, 0xea4) r7 = syz_open_dev$vcsa(&(0x7f0000000100)='/dev/vcsa#\x00', 0x5, 0x660081) sendto$unix(r7, &(0x7f0000000280)="e54d992a8476b2b974952b00b9f41780d4de94cc3dc77ff994ecdd58769b69ad00de2b5e16937901deb70ead92c90fa15ff1f7da2afa761342b22dc910ee5d31fa6bd1740b8e44147713b4904068fc49c30d3fe78b1d58231faea589e7b34b", 0x5f, 0x80, &(0x7f0000000300)=@abs={0x1, 0x0, 0x4e20}, 0x6e) [ 175.999503] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:19 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 176.046788] QAT: Invalid ioctl 2033/05/18 03:35:19 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="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", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r2, 0x54a2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000300)=""/162, &(0x7f0000000140)=0xa2) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:19 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x3) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) bpf$MAP_CREATE(0x0, &(0x7f0000000080)={0xf, 0x5, 0x8, 0x8, 0x13, r2, 0x5}, 0x2c) msgget$private(0x0, 0x109) [ 176.074927] QAT: Invalid ioctl 2033/05/18 03:35:19 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) ioctl$KVM_CREATE_PIT2(0xffffffffffffffff, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(0xffffffffffffffff, 0xae60) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r3 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r3, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(0xffffffffffffffff, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r4 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r3, 0x4c82) r5 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x1, 0x0) r6 = fcntl$dupfd(r1, 0x0, r3) connect$vsock_stream(r5, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405d9bcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30f9516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080006004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) r7 = accept4$packet(r3, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r5, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r6, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000940)={"73797a5f740500", r8}) r10 = dup2(r0, r4) dup3(r1, 0xffffffffffffffff, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000700)=0x17, 0xffffffffffffff98) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r9, 0x6}, 0x8) 2033/05/18 03:35:19 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 176.158515] ALSA: seq fatal error: cannot create timer (-22) [ 176.163963] QAT: Invalid ioctl [ 176.247167] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:20 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000000000)={&(0x7f0000791000)={0x10}, 0xc, &(0x7f0000e2a000)={&(0x7f0000000040)=ANY=[@ANYBLOB="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"], 0x1c}, 0x1}, 0x0) 2033/05/18 03:35:20 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="caf872fb22be870eeeeaea0f48d611ee895ae3d77a86df9dd159de2e810ce1b0b12add77da7569d56f34dfbdfcaedadd94741f194ded0beb7cbd6f2b4e694c7e7d2b37b0734a868bee88516301aaa8ff60ef19533c4fe06f699ee3c9aaf9121be8edb0f329354eae2681fbee9a2022564cb484a9d9524375aa8400006663dad5cad482edbec0f06db80a1577616f2825f99ea9eb7766aa2e209e6dc8f1694f56100bb0d12d79d1fb676a08d8991ae69e4a6a435cd9ae70df9e710fa2235245c45faacb41fe3e4cda9430dc15681ecd77b213f763631b1c8b4d5710ca64cdd88954cd2abe0e8baf94e970c6e24bc9625ba8a587e717fddad9e825a36b0733d032", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$TCGETA(r1, 0x5405, &(0x7f0000000140)) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:20 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f00000009c0)=""/93, 0x54}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000001000)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:20 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) fanotify_init(0x8, 0x88002) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$TIOCSBRK(r1, 0x5427) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x420) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 6: r0 = memfd_create(&(0x7f0000000240)='\x00', 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(0xffffffffffffffff, 0x4c00, r0) sendfile(0xffffffffffffffff, r0, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 176.441756] ALSA: seq fatal error: cannot create timer (-22) [ 176.499558] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:20 executing program 3: r0 = memfd_create(&(0x7f0000001380)='bdev#cgroup@\x00', 0x0) syz_open_dev$sndseq(&(0x7f0000000440)='/dev/snd/seq\x00', 0x0, 0x40) socketpair$inet_udp(0x2, 0x2, 0x0, &(0x7f0000000540)) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000200)=0x3ecb21cb, 0x4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000280)={0x0, 0xaf9, 0x10}, &(0x7f0000000100)=0xc) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f0000000240)={0x3, [0x0, 0x0, 0x0]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000140)={r1, 0x8}, &(0x7f00000002c0)=0x8) r2 = creat(&(0x7f0000002540)='./file0\x00', 0x0) ioctl$fiemap(r2, 0x40086602, &(0x7f00000002c0)={0x4000}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000300)={0x0, 0xfffffffffffffff8}, &(0x7f0000000340)=0x8) openat$kvm(0xffffffffffffff9c, &(0x7f0000307ff7)='/dev/kvm\x00', 0x0, 0x0) eventfd2(0x0, 0x0) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000020000)={0x0, &(0x7f000002d000)}) ioctl$KVM_IOEVENTFD(0xffffffffffffffff, 0x4040ae79, &(0x7f0000000040)={0x0, &(0x7f000002d000), 0x0, 0xffffffffffffffff, 0x4}) ioctl$KVM_SET_GUEST_DEBUG(0xffffffffffffffff, 0x4048ae9b, &(0x7f0000000480)={0x0, 0x0, [0x2, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x2]}) r3 = openat$cuse(0xffffffffffffff9c, &(0x7f00001a3000)='/dev/cuse\x00', 0x0, 0x0) mmap$binder(&(0x7f00002d0000/0x2000)=nil, 0x2000, 0x0, 0x10, r3, 0x0) getpeername$packet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000000080)=0x14) setsockopt$ax25_int(r0, 0x101, 0x4, &(0x7f00000000c0)=0x7f, 0x4) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, &(0x7f0000642fb4)={0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfdfd]}) 2033/05/18 03:35:20 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = msgget(0x3, 0x2a2) msgsnd(r2, &(0x7f0000000080)=ANY=[@ANYBLOB="02000000000000ed680000000000000000000000"], 0x14, 0x800) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r1, 0x4058534c, &(0x7f0000000180)={0xe584, 0x80, 0xf8, 0x8, 0xff, 0x6}) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x400) 2033/05/18 03:35:20 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x400, 0x0) setsockopt$bt_hci_HCI_TIME_STAMP(r0, 0x0, 0x3, &(0x7f00000000c0)=0x80000001, 0x4) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f0000000280)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in=@broadcast}}, &(0x7f00000001c0)=0xe8) r3 = getgid() syz_fuse_mount(&(0x7f0000000180)='./file0\x00', 0x2, r2, r3, 0x8, 0x2000000) r4 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r4, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r5 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r4) writev(r5, &(0x7f0000000580)=[{&(0x7f0000000200)="6984974e5b80e093906c7725a6", 0xd}, {&(0x7f0000000380)="982285a003360499a8e7cfdb556b42346a1dfecb254ecd8c27eecd5b7e22c5f45632c9cd256d", 0x26}, {&(0x7f00000003c0)="040e9ebd939a98c88c549d41", 0xc}, {&(0x7f0000000400)="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", 0xfb}, {&(0x7f0000000500)="4d44d82621a2300f58b1aa1b6da72020db085ef5d4f122cec4f538bc89114f722d04bec7063f6093de484e793eb0ab7c0727250d2bc88a97ca7a5a2b9b01472de051b1f5d0484a2c940d82ce8300c2f9589545340687f0ae1d311589", 0x5c}], 0x5) sendfile(r1, r4, &(0x7f0000000000), 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r0, 0x12, 0x3, &(0x7f0000000100)=0x8, 0x4) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:20 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0c830c45e09ae1a177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca521970add7c1b99fcd280a664bb7168b904a262e7c66c48170c788a53a23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e8564db149bf77e5b9dfc4b7b6a714a0145e0275215c88de345d2cba6ace192b5ad9da6"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="caf872fb22be870eeeeaea0f48d611ee895ae3d77a86df9dd159de2e810ce1b0b12add77da7569d56f34dfbdfcaedadd94741f194ded0beb7cbd6f2b4e694c7e7d2b37b0734a868bee88516301aaa8ff60ef19533c4fe06f699ee3c9aaf9121be8edb0f329354eae2681fbee9a2022564cb484a9d9524375aa8400006663dad5cad482edbec0f06db80a1577616f2825f99ea9eb7766aa2e209e6dc8f1694f56100bb0d12d79d1fb676a08d8991ae69e4a6a435cd9ae70df9e710fa2235245c45faacb41fe3e4cda9430dc15681ecd77b213f763631b1c8b4d5710ca64cdd88954cd2abe0e8baf94e970c6e24bc9625ba8a587e717fddad9e825a36b0733d032", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r2, 0x8040450a, &(0x7f0000000300)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) syz_open_dev$adsp(&(0x7f0000000140)='/dev/adsp#\x00', 0x3, 0xc00) r5 = getpgrp(0xffffffffffffffff) sched_rr_get_interval(r5, &(0x7f0000000400)) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:20 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080), 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 3: r0 = inotify_init() r1 = socket$nl_netfilter(0x10, 0x3, 0xc) perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x0, 0x0, 0xffffffffffffffff, 0x0) sendmsg$nl_netfilter(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="bc00000005060000000000000000000000000000a4000000722868fda92c3a2fc8c446c0840905dc728ece8577ee11278ec62af7877578665524d1f4e2d96ced16b9ad16e5a3a29f29670ef401421df33dec72efe342dbe84e59659a46090fd4a0afd3dd891df6315c7a2d9dd63b032fa44351f479c966a39b931ff2116648f6c223570db8f6c48810c83e19d7fbc119a9961b90dd1e11085ca8a5b1259ea4275b2427facbe2279b39d73c0e1f45db09783092be"], 0xbc}, 0x1}, 0x0) mkdir(&(0x7f00008c9ff6)='./control\x00', 0x0) inotify_add_watch(r0, &(0x7f000003a000)='./control\x00', 0x1000800) r2 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080)='/dev/audio\x00', 0x2000, 0x0) getpeername$unix(r2, &(0x7f0000000100)=@abs, &(0x7f0000000180)=0x6e) creat(&(0x7f0000ddb000)='./control/file0\x00', 0x0) r3 = inotify_init1(0x0) inotify_add_watch(r3, &(0x7f0000fc7000)='./control\x00', 0x86000006) creat(&(0x7f0000000040)='./control/file0\x00', 0x0) [ 176.634774] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:20 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) setsockopt$IP_VS_SO_SET_STOPDAEMON(r1, 0x0, 0x48c, &(0x7f0000000080)={0x0, 'lo\x00', 0x2}, 0x18) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x9, @mcast2={0xff, 0x2, [], 0x1}, 0x3ff}, @in6={0xa, 0x4e21, 0x1, @local={0xfe, 0x80, [], 0xaa}, 0x10001}, @in={0x2, 0x4e22}, @in={0x2, 0x4e24, @local={0xac, 0x14, 0x14, 0xaa}}], 0x58) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000180)={0x2, 0x200, [{0xffff, 0x0, 0x1366}, {0x2, 0x0, 0x8}]}) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 3: r0 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000003c0), &(0x7f0000000400)=0xe, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000440), &(0x7f0000000480)=0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_type(r0, &(0x7f00000005c0)='cgroup.type\x00', 0x2, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000140)={0x0}, &(0x7f0000000300)=0xc) ioctl$sock_FIOSETOWN(r1, 0x8901, &(0x7f0000000340)=r3) r4 = socket(0x0, 0x5, 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) set_tid_address(&(0x7f0000000000)) setreuid(r5, r5) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffff9c, 0xc00c642d, &(0x7f0000000600)={0x0, 0x80000, r2}) ioctl$DRM_IOCTL_MODE_SETCRTC(r6, 0xc06864a2, &(0x7f0000000680)={&(0x7f0000000640)=[0x9, 0x6, 0xef], 0x3, 0x5, 0x81, 0x6, 0x3, 0x7, {0x100000000, 0xadcc, 0x7, 0x9, 0xb085, 0x0, 0x1ff, 0x7, 0x10001, 0x5, 0x10000, 0x401, 0x3ff, 0x9, "8e9684de305670c9c88689295f20bd28652c22483e830b978ed046e310ac34f8"}}) bind$pptp(r4, &(0x7f0000000100)={0x18, 0x2, {0x0, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x34a) r7 = syz_open_dev$adsp(&(0x7f0000000700)='/dev/adsp#\x00', 0x4, 0x400000) ioctl$KVM_GET_NR_MMU_PAGES(r7, 0xae45, 0x9) r8 = add_key$keyring(&(0x7f0000000180)='keyring\x00', &(0x7f0000000240)={0x73, 0x79, 0x7a, 0x2}, 0x0, 0x0, 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000380)={'rose0\x00', 0xfffffffffffff800}) socket$pptp(0x18, 0x1, 0x2) request_key(&(0x7f00000002c0)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a}, &(0x7f0000000280)='logon\x00', r8) r9 = semget$private(0x0, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) semctl$IPC_RMID(r9, 0x0, 0x0) semtimedop(0x0, &(0x7f0000033816)=[{0x0, 0x0, 0x800}], 0x1, &(0x7f0000034000)={0x77359400}) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000004c0)={0x0, 0x7c, &(0x7f0000000040)=[@in={0x2, 0x4e21, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @broadcast=0xffffffff}, @in6={0xa, 0x4e21, 0x7ff, @local={0xfe, 0x80, [], 0xaa}, 0x4}, @in={0x2, 0x4e24, @broadcast=0xffffffff}, @in={0x2, 0x4e23, @rand_addr=0xffff}, @in={0x2, 0x0, @multicast1=0xe0000001}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}]}, &(0x7f0000000500)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000540)={r10, 0x1000}, &(0x7f0000000580)=0x8) socket$key(0xf, 0x3, 0x2) [ 176.738218] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:20 executing program 6: r0 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x10000000000, 0xc93f8c112233b907) tee(r0, r0, 0xcd51, 0xb) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000000700)=[{&(0x7f0000000180)="fbb3cb21c6a1d200c396ec22a45182496c06d8e83f5305a0d8860d2ace069eab2eaa53ffa9e069f2025c715abe3b414c0033ec0661aa6834640b5bf16ce7186d130ff22aa18b58a960"}, {&(0x7f0000000780)="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"}, {&(0x7f0000000380)="dff63ff7bebfee999f6338fe1f979c2365eb3a32be66f77204eab91a5147884034bad12c724b8b370136b7818d1c9507e03992c5ad998a9db27f090c6a1a6bbe5b835f323deee1facb0a29f245efbc51d1f8dbb012ccbe3f42e4dbe4a51ace9b5cf22604696b6d31629e571456ff2e6ba5e440d6ed73f77288ad87a9c0892ecbdcd11f747a69b17665f43ca8598ef452ee25cb48516d097524cf08b5b22c80c18f159ff555c66ae06f38a56e943e33247926b7e3a3b9862f37b05f99"}, {&(0x7f0000000440)="602cb9984b287e21e6ea941ffb97385919ff3d6b59a53d4be1bb942ca50cf31ec411f26baa573d626d2abbf9603307da0b0002cb9650967400b50435ee8b599d968e2487973883a9ca833778a01ac027c88b99016dec4d8b09ea4c6b85fe9ff1985fb9520ddf8440af6379ddd3f86d57e861c642e4a03310f6b9e155356062f60e986351945101efe68ad19f856ab7d3", 0x2f9}, {&(0x7f0000000500)="c9b674cc19555bf40abd35cb7d9d991dbccc3f7081a4e7949466c64dfaabba7a3ed703dcdce7081b63a8e84abbd6337ed7e7ebee9895f0436300a2daea9fd01e401757acc69cda732d4be1b3d3cb48036833d8eb8a9a83b84d000bad205bac8d4c0196bdad700330de541853c5c25ce178a0fedad42699e825ee2c95e37e892b10222126ee74153c91a3c84a96a629fc389753d3a3c5f52b40241b092d783cf1b81b49ff74e78cfcfc444bddd9cf0d4e501cebe385a5ac417bffd439ab4d8bee7ceced85ae93f76f7555c39248bb16"}, {&(0x7f0000000600)="e09ddc026e458b6575119b7c3c734fc3197f1b3e0e9bf3abccf0760909ee458b670f891d540213b46d06454f22526c69358dc95587c4deedd6c4d6edfc8f2ec509ae338c08eefb5842bc546219c0ff08f6fffdd67916ec7f4d80189482ecee3410037528671e0a521a2a766651dd13b86aad98882333a2c26c0d0cf5565e2ba1a049949aa797a67e573d27a2901c1afb44e3eab749dac69d29e4b0c7eef7097f7305ff291aa265ce35686e52f32d02c6b877ec4ecb982195ac98ed1f124a65fd2f969c909fea7b31ce4b22d98b"}], 0x1000000000000007, 0x0) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$TCFLSH(r1, 0x540b, 0x8) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:20 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r2 = memfd_create(&(0x7f0000001740)="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", 0x1) r3 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r3, &(0x7f0000001440)={0x9a2}, 0x8) r4 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r4, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="0100f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r2, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r4, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r2, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:20 executing program 3: ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f00000000c0)=0x0) sched_setscheduler(r0, 0x0, &(0x7f00000001c0)=0x25) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x7fffffd, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x0, r1) r4 = socket$can_bcm(0x1d, 0x2, 0x2) socketpair(0x15, 0x8080f, 0x51, &(0x7f0000000200)) connect(r4, &(0x7f0000eefff0)=@ethernet, 0x10) sendmsg$can_bcm(r4, &(0x7f0000168000)={&(0x7f0000006000)={0x1d}, 0x10, &(0x7f00004daff0)={&(0x7f0000000140)=ANY=[@ANYBLOB="055e93e74a58ebccc30000000000000000000000009d89f0e7d6c86788facff9ce1a1607000000", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000000100000000000000000000000b73a01c25e50766"], 0x48}, 0x1}, 0x0) recvmmsg(r4, &(0x7f0000003840)=[{{&(0x7f0000003680)=@vsock={0x0, 0x0, 0x0, @my}, 0x80, &(0x7f0000003800)}}], 0x1, 0x0, &(0x7f0000003a00)={0x77359400}) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000004000)={0x1d}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x7, 0x0, 0x0, {}, {0x0, 0x7530}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "510200"}}, 0x48}, 0x1}, 0x0) ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_CLOCK(r3, 0x4030ae7b, &(0x7f0000000340)) r5 = accept4(r1, 0x0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000240)={0x1, 0x0, 0xab, 0x9, 0x0}, &(0x7f0000000280)=0x10) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f00000002c0)={0x6, 0x3, 0x0, 0x0, 0x9, 0x3, 0x7, 0x5, r6}, &(0x7f0000000300)=0x20) 2033/05/18 03:35:20 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$TCSETAW(r2, 0x5407, &(0x7f0000000080)={0x101, 0xfffffffffffffffa, 0x8, 0xf929, 0x100, 0x3, 0x8f6f, 0x1, 0x7, 0x4}) ioctl$TIOCGSID(r2, 0x5429, &(0x7f00000000c0)=0x0) migrate_pages(r3, 0x8001, &(0x7f0000000100)=0x1, &(0x7f0000000180)=0x9) sendfile(r1, r2, &(0x7f0000000000), 0x3) fchdir(r0) msgget$private(0x0, 0x109) ioctl$KDSETLED(r2, 0x4b32, 0x3ff) ioctl$KDSETLED(r2, 0x4b32, 0x3) 2033/05/18 03:35:20 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x1cc, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$TIOCLINUX4(r1, 0x541c, &(0x7f00000000c0)=0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) memfd_create(&(0x7f0000000080)='selinux\x00', 0x2) msgget$private(0x0, 0x6) [ 177.157761] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:20 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x0, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:20 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:20 executing program 5: r0 = syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x7, 0x800) openat$cgroup_int(r0, &(0x7f00000000c0)='pids.max\x00', 0x2, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:20 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$sndpcmc(&(0x7f0000000080)='/dev/snd/pcmC#D#c\x00', 0x8, 0x18101) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000480)='IPVS\x00') sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01ae51eb7e00fedbdf250c000000080000000008000400000000000c006c602de36eedecfa000000000000000000000000002528e1166d62eaf59ca264b322bac43cadd8e73bb4658e9fdd6f2d6476de5c826836e0834fe1e73236050eb7802445867205e9b1a710823e0ffc213887828def308b7d54db5d386b1318c613811eed228e614bfaef6a3fc466881a06"], 0x38}, 0x1, 0x0, 0x0, 0x50}, 0x0) msgget$private(0x0, 0x109) [ 177.258289] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r6) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 3: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_int(r0, 0x0, 0x16, &(0x7f0000000000), 0x4) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2033/05/18 03:35:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000000300)='/dev/snd/seq\x00', 0x0, 0x0) r1 = getpgrp(0x0) ioprio_set$pid(0x3, r1, 0x2) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r2 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480), 0x0) getpeername$packet(r2, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r3 = memfd_create(&(0x7f0000001740)="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", 0x1) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r4, &(0x7f0000001440)={0x9a2}, 0x8) r5 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000140)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB="5b2c000bcb71d0d7e707"]) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r3, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x1, 0x100) close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = socket(0x2, 0x5, 0x80000000) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000580)={{0x2, 0x4e23, @broadcast=0xffffffff}, {0x7, @dev={[0xaa, 0xaa, 0xaa, 0xaa, 0xaa], 0x1a}}, 0x40, {0x2, 0x4e21}, 'ip6gretap0\x00'}) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) getsockopt$inet_IP_IPSEC_POLICY(r2, 0x0, 0x10, &(0x7f0000000280)={{{@in6=@ipv4={[], [], @multicast2}, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@local}}, &(0x7f0000000080)=0xe8) clock_gettime(0x0, &(0x7f0000000180)={0x0, 0x0}) sendmsg$can_bcm(r2, &(0x7f00000003c0)={&(0x7f00000000c0)={0x1d, r4}, 0x10, &(0x7f0000000380)={&(0x7f0000000440)=ANY=[@ANYBLOB="03000000000200000500000000000000", @ANYRES64=0x0, @ANYRES64=0x7530, @ANYRES64=r5, @ANYRES64=r6/1000+10000, @ANYBLOB="000000600100000000000000330100001493d979895cbac950f76dc36f1a3fa3ce8c8832d56d66cccaaebfe15376f21611364c000000000885d3853bb5cfe73800000000000000000000000000000000259e60309f4e5789a76a0b8f8ea4b934bafd447fa3cb3803dd7b79940e9a2e81f8cc6b3bd7da370ab4d8a14a5eb7c23a5f92a334c46c05ddd84e1905e6bbe4d9620d8da2491f8e51609ef9a7b028b25cf5784d2eb122f61ff03d150c9bfc68307c8ea838db94dfd963337d33ffe62005ab038daec0cc2f66955bb21a65014ed491d2e5a1ec968f7c7966c6afb05f35d454e40388324148a328cc"], 0x80}, 0x1, 0x0, 0x0, 0x20008040}, 0x40010) sendfile(r0, r2, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) getsockopt$bt_BT_DEFER_SETUP(r2, 0x112, 0x7, &(0x7f00000001c0), &(0x7f0000000200)=0x4) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) r7 = semget$private(0x0, 0x7, 0x0) semctl$SETVAL(r7, 0x4, 0x10, &(0x7f0000000400)=0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r3) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x439, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x406, r1) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x3, 0xfffffffffffffffd}, &(0x7f00000003c0)=0xc) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r0) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) ioctl$TIOCLINUX3(r1, 0x541c, &(0x7f0000000080)=0x3) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)="5e9a67b69cfb7a7ce737aa003d625210aad2cb2c993e", 0x16}, {&(0x7f0000000280)="7651b2fdd412552acec8bc7cd6270b4d45e043d83e19606fd01a54fbe7b31a05e47c2eeb83312677aac0b722f9f155f677b84856eaffddac77e2fb2a33eda20919e832b86902cb9f7f357a78c95b5cd29610304c4c1c959a570a741d868c98b5db01a7f2c2c199bd4806cd31399da2712f1ef60eb0b7c7d04ae41309ca89925efcb9fe4f8a4692107a53944a4bb516e05ac4a707c93f7303dc6475593eb4dbf18f3e7e1deb7b952a3a05b39433ea458d339294ae5d9557964d1892849b11b20bfee57419d2ee4667e5333f5bb1ef9eb137c1fd89ae97d6", 0xd7}, {&(0x7f0000000380)="435324690b45fbb1fce1985180b3a806aac48499915cfd720c5f4dfd48540250834971f326a1aa618eeac48c421351c769bced1854386274b629642bb2ef0ee617358cf68c4da9ad76809230c7c1ca7a60a8f9b41b6d174a641ff923860fa2f03fce52507be92161b38f228ef4b3b54ec140b3ec6d4d35ad4dad9ebe46db1ab9841b355ca2be6960385a4fdb9d7c3494ffba9cd0e281100309b3cae9e1b1d7d354a1ca9a691a301a68fa8bee891bfa4d7de4fa2acf3495ecab7acb7ff1dbeec394b995", 0xc3}, {&(0x7f00000000c0)="46e9c5fbb03e9745b8dac98b15d48f1308c0f51770bf668fa462b75780fb2dd7", 0x20}], 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) getsockname$netrom(r1, &(0x7f00000001c0), &(0x7f0000000200)=0x10) 2033/05/18 03:35:21 executing program 3: perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$l2tp(0x18, 0x1, 0x1) r1 = socket$l2tp(0x18, 0x1, 0x1) getpeername(r0, &(0x7f0000000040)=@pppol2tpv3={0x0, 0x0, {0x0, 0xffffffffffffffff, {0x0, 0x0, @rand_addr}}}, &(0x7f00000000c0)=0x80) connect$l2tp(r1, &(0x7f00005fafd2)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2=0xe0000002}, 0x4}}, 0x2e) getsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f0000000100), &(0x7f0000000140)=0x4) connect$l2tp(r0, &(0x7f0000e92000)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @remote={0xac, 0x14, 0x0, 0xbb}}, 0x2}}, 0x2e) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 177.533997] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 177.581741] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r1, r1, &(0x7f0000000280), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$DRM_IOCTL_GEM_FLINK(r1, 0xc008640a, &(0x7f0000000180)={0x0}) ioctl$VHOST_SET_VRING_ENDIAN(r1, 0x4008af13, &(0x7f0000000200)={0x3, 0x9}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r1, 0xc00c642d, &(0x7f00000001c0)={r2, 0x80000, r1}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'eql\x00', 0x0}) bind$bt_hci(r1, &(0x7f00000002c0)={0x1f, r3}, 0xc) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000080)={{0x0, 0x3}, {0xb5c5, 0x1}, 0x8, 0x1, 0x100}) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r3 = memfd_create(&(0x7f0000001740)="caf872fb22be870eeeeaea0f48d611ee895ae3d77a86df9dd159de2e810ce1b0b12add77da7569d56f34dfbdfcaedadd94741f194ded0beb7cbd6f2b4e694c7e7d2b37b0734a868bee88516301aaa8ff60ef19533c4fe06f699ee3c9aaf9121be8edb0f329354eae2681fbee9a2022564cb484a9d9524375aa8400006663dad5cad482edbec0f06db80a1577616f2825f99ea9eb7766aa2e209e6dc8f1694f56100bb0d12d79d1fb676a08d8991ae69e4a6a435cd9ae70df9e710fa2235245c45faacb41fe3e4cda9430dc15681ecd77b213f763631b1c8b4d5710ca64cdd88954cd2abe0e8baf94e970c6e24bc9625ba8a587e717fddad9e825a36b0733d032", 0x1) r4 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r4, &(0x7f0000001440)={0x9a2}, 0x8) r5 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r5, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r3, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r5, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r3, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) ioctl$TIOCCBRK(r2, 0x5428) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) [ 177.603965] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080)='/dev/sequencer\x00', 0x20080, 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 177.735508] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x0, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e22000008000100020000000808000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a40000000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000c8df6238624f899a09088870f4464e791dc0299b4f241892560cca6dd0c97d0f59dd62505a24827f7f041b17b6854dd0e25bbf6a0a3ace95cd05ad22af95f21136341bd76b1b3d2b01f9497390a3c98580ce51ef0bee45ffc68f93527842a600fdfa77e2f4110e017ad87475b90e1127be18a9168ace29f38aca5ead178d40fc7bbc253bd22e7f989257e11987a243a478621f000628bcabc4c9ab321ede13d087c9fd5c322fa66006a7f65e767bfd26f61529f3425b68356e01393f186bf4a1cf7347390b7852827ea8cf1a5d51a179c3ce73eb86ff83bf1277c5e9a11a8096212279758545d8127b80328e18d90dc580714e147d5607c4822fcf4d94c08ee2335d4bdd96876beb8fb05be7bcaafb5500000000000000000000003084c5212362b7527db2b3bba0715541ca7b229d3fd702a402cb3e2427fd3f8452f3567f5ffbf5ccf5418731ea425b6d08c80276bf1246720729516c4ecafc3533a347dc536cacf7bfaf845f9aaa4cf6ff76bf391b64cbadf5b542cc3f7f25ee32db2cc2b919b8c180abaee318bf836c6bcab7361102aba992d514c0b4bcb7c2cc02ab2261022f1d3aa27be5f348702eb1c877b94cce373eb8016383c827a13769707c629fd97ec33f80e4277483792c412533c546d8a438c547bf270437cc8a99ba145ff039cdf58694ed6a8a572733cf4debad448af93202b315087ae7360761d80ab821156ee0a5b630ad90db17f093c15cc67a0f3c1e94000000"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:21 executing program 3: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect(r0, &(0x7f0000002000)=@ethernet, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000300)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000000)={&(0x7f0000004000)={0x1d, r1}, 0x10, &(0x7f0000002ff0)={&(0x7f0000004fb8)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b100"}}, 0x48}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f00005e4000)={&(0x7f00002ccff0)={0x1d, r1}, 0x10, &(0x7f0000728000)={&(0x7f00000aef80)={0x5, 0x900, 0x0, {}, {}, {0x1, 0x6}, 0x1, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "260503dd3e3c0a6afe3f7b377378f2e013e66ff1bf538a0f1abc5b8beb605be3d9448c99787c873249ed9c34e040a29606427925d8dd9065c240a288783179ce"}}, 0x80}, 0x1}, 0x0) sendmsg$can_bcm(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000140)={&(0x7f00000000c0)={0x6, 0x0, 0x0, {0x0, 0x7530}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "d300692ddfae1e24"}}, 0x48}, 0x1}, 0x0) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) mincore(&(0x7f0000ffd000/0x1000)=nil, 0x1000, &(0x7f0000000080)=""/73) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100)={0x0, 0x200}, 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:21 executing program 2: r0 = syz_open_dev$sndseq(&(0x7f0000b39000)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000b0bf74)={0x7e17, 0x0, 0x0, 'queue0\x00'}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r0, 0xc0a85322, &(0x7f0000000180)) r1 = creat(&(0x7f0000000080)='./file1\x00', 0x0) pipe2(&(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) io_setup(0x1, &(0x7f0000000140)=0x0) io_submit(r4, 0x6, &(0x7f0000000800)=[&(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, r2, &(0x7f0000000300)="3e4e6818d29f8b87b8fe45e90aac663513e0a0e8f2f3c0bde0f19fe952d3efebd28fea43dd2a7e9c342767ede56f36d51a6709a364432cd10ae514065e701713cb7137b6ff70f4cc6472d9945dadd28f4f575058386015c146841db78273fbfa4956f78a6de6663a79484611d537", 0x6e, 0x1000, 0x0, 0x0, r1}, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x6, 0x40, r0, &(0x7f00000003c0)="e6938c035cf205e51646196616014d41caba422200f3d0d3439817969da3165dd103f91b79ff4d5f77e5eed702712a2e259be2377ec270ee695f52a2ca9a50621a7ac6dcf1f3a2d51a4ce0a33398a4f78e19847300fe6e222293574e254420d2f097add52229896b03d758327624e6199d7d45a2a207b8e601b74ba99abd69151f7b1a60523a6e9ce0e929848d25dfeb67e1f9e53dc610fc3aa0", 0x9a, 0x1, 0x0, 0x1, r2}, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x6, 0x0, r1, &(0x7f00000004c0), 0x0, 0x7, 0x0, 0x1, r1}, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x2, 0xffffffffc0afc60c, r0, &(0x7f0000000540)="501bcb935329ef8dc17fa573ef23464c7148f5f90a73ff20a9e98a7a0afefeb443d9ab4cf6dffde911005d9819f086310d8f9b6ca2f907f1adb9070bc4a5a6f8583796bb1ff8473487e6a46e7b2a0283920b10c3c7bf95445e93fe19c07546263e951cb4ab0b78e4f77d4faea58fbb63ad", 0x71, 0xffffffff, 0x0, 0x1, r3}, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x6, 0x88, r2, &(0x7f0000000600)="6df1aec7e4ea10501fd575ab84837040eb9ea73e00ba44901157c626b481f55f6747ff89012ab643247d365333665afe32980484886322e41db4f1dc448c282de8febd5bdb0e3118061f332ad0d4de0c31dbddf3f9a2bb7d69efd8bfff7fef21052ab64da4739f8e0c7be9fce635e07c755551083f4476529b2b308419c88ae744d78e8430bcb38646eaac6eb31f8ec5c312311f013338d734f19b54d05077607a34d4cfaae34fb1390bcef4f61464f7890899fd7ec7516c12eed4561f929b6971773548af87eff4800e097a0b045bf1ee26fdcce8029a30ad26d0bda6d90feef766480ec454c7bcf98b306c18d7", 0xee, 0x3, 0x0, 0x1, r3}, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x7, 0xf86, r3, &(0x7f0000000740)="115c6a3148116ee47f9b288227e7bd798b0956866a5b659ef49d78a0336814c8f055d91cd796e6096f786b8a09e5ef1787b54de021da248ba65aa2af0287514c95d4d2a5", 0x44, 0x8, 0x0, 0x1, r3}]) getpeername$packet(r1, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000001400)=0x14) r5 = memfd_create(&(0x7f0000001740)="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", 0x1) r6 = syz_open_dev$sndseq(&(0x7f0000d82000)='/dev/snd/seq\x00', 0x0, 0x8000000040102) truncate(&(0x7f0000000100)='./file0\x00', 0x5e0) signalfd(r6, &(0x7f0000001440)={0x9a2}, 0x8) r7 = dup2(r0, r0) ioctl$EVIOCGMTSLOTS(r7, 0x8040450a, &(0x7f00000014c0)=""/201) ioctl$VHOST_SET_MEM_TABLE(r5, 0x4008af03, &(0x7f0000000040)=ANY=[@ANYBLOB="010000000000000000f01000000000000010000000000000", @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00']) ioctl$PIO_FONTRESET(r0, 0x4b6d, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="57855e3bea526513cad27950edd7eb0582438bae75547fc1d18018b4b0860bff556ac0d6108543508a9924e127c2130dd0", 0x31) getpid() setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @ipv4={[], [0xff, 0xff], @loopback=0x7f000001}, 0xffff}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ptrace$getenv(0x4201, 0x0, 0x6c, &(0x7f00000002c0)) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r7, 0x40605346, &(0x7f000013e000)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}}) recvfrom$packet(r5, &(0x7f0000001300)=""/254, 0xfe, 0x2022, 0x0, 0x0) syz_genetlink_get_family_id$fou(&(0x7f00000015c0)='fou\x00') close(r0) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b33, &(0x7f0000000000)) 2033/05/18 03:35:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$TIOCGWINSZ(r1, 0x5413, &(0x7f0000000100)) ioctl$LOOP_CLR_FD(r0, 0x4c01) openat$cuse(0xffffffffffffff9c, &(0x7f0000000080)='/dev/cuse\x00', 0x400000, 0x0) msgget$private(0x0, 0x109) syz_open_dev$sndpcmc(&(0x7f00000000c0)='/dev/snd/pcmC#D#c\x00', 0x3, 0x501840) [ 177.781380] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000080)={0x3, 'irlan0\x00', 0x4}, 0x18) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) connect(r0, &(0x7f0000000000)=@generic={0xc, "ecbfce8649d3d74a26e4d44196b70b017ed545eb20de3258e4eb60141fd463b31c35d4d17baf9b2306994ae5eb11ee00ef4b66110bdb58af5fb6a72345ea418df9ecfb89a2a1387acdde4357974f553425e00e556e0ecfb0a135226bd9b59c9ac3c99f0df9ef3248d1581d18e6be8ad47f2b137ef8209ce77b29916213e5"}, 0x80) r1 = syz_open_dev$mouse(&(0x7f00000001c0)='/dev/input/mouse#\x00', 0x7, 0x0) socketpair$inet(0x2, 0x3, 0x8001, &(0x7f0000000240)) accept(r0, &(0x7f0000000280)=@rc, &(0x7f0000000100)=0x196) r2 = syz_open_dev$vcsa(&(0x7f0000000340)='/dev/vcsa#\x00', 0x0, 0x40000) getsockopt$inet_sctp_SCTP_ADAPTATION_LAYER(r2, 0x84, 0x7, &(0x7f0000000080), &(0x7f0000000200)=0x38b) ioctl$fiemap(r1, 0xc020660b, &(0x7f0000000380)={0x7, 0xfff, 0x3, 0x1000, 0x3, [{0x5, 0x3, 0x100000001, 0x0, 0x0, 0x808}, {0x8, 0x9, 0x3, 0x0, 0x0, 0x2000}, {0x7, 0x1, 0x9, 0x0, 0x0, 0x200}]}) socket(0x5, 0xb, 0xa248) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000010c0)=ANY=[@ANYBLOB="240000001900ed4a11000000000000000a00002d8d9f7c4090e02db0a84de90000000000"], 0x24}, 0x1}, 0x0) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e1589000000"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 177.909759] netlink: 8 bytes leftover after parsing attributes in process `syz-executor3'. 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0xb, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x0, 0xfffffffffffffffc) syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x7, 0x101180) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$EVIOCSABS2F(r1, 0x401845ef, &(0x7f0000000080)={0x10000, 0x400, 0xffffffff, 0x7, 0x7f, 0x4}) recvmsg$netrom(r1, &(0x7f0000000680)={&(0x7f00000000c0)=@full={{0x3, {"6f41f3dd63ba6c"}, 0x9}, [{"0f7c772ae11fc8"}, {"9c7888fe6561d8"}, {"8e0bdc6dce8b81"}, {"b57bef6eeb9073"}, {"2b741f602aee3f"}, {"13f27bf8790c37"}, {"9b4a9a3fb4e745"}, {"e701caef7efa41"}]}, 0x48, &(0x7f0000000200)=[{&(0x7f0000000180)="c58a7e4a8ea85b5c6b8026de0117647eadc2df549fcf64ccbfe917db71af900bcb94a4a9cd723657e3560a1a247050f8a9d5dac460efb1a6189d3afd11045e5cd576eef72de93ff5271771ed7b1e4dfe4bfa15e8e01c369a55b23e80fc945dff8e4fba6dee5ad3df172ac67ed90eb251d5079a", 0x73}, {&(0x7f0000000280)="b23a01a60b5d864d619051809d2fbb3f8ee5362b34ff902d23b36daafc6c9f32cfb7cc1c3ddb701c47b05f389c75a03ef871c17545068b58910c6df4aea227bd7c76099f62afc95d9853667895e157b599991b62", 0x54}, {&(0x7f0000000300)="566cf5b023ab351b139c6ebd50e44746403ba7e8ffa3842f0d7ad9a48effdf0b3ffa66f0172c6272e91e3267b19576d30e9b353e05b9133cf1f1ecbe4b0a225f6b097e89bbfe", 0x46}], 0x3, &(0x7f0000000380)=[{0xf8, 0xff, 0x100, "2e51bffb45ac1eb322b2ca7de3f5c3796fbfb116ef7b47d04a8b2c2ecf86f06eed7cb4f182af7e5cfad91dd37e478f3c7b6e9c6f591b4b622fb1f03e8ef1887e71e3429e52b86b5a2a2be1e8dac17cfadc231f375a324bb0f8f5e2a95e88b1a0a2ff6bf5dbc2a0ab9849155d7129ab475cd9b5ffc4828224b5e2f63838c74188b1cd99e525e9c2dec7d724f4e1ac8eba1e77b2944021620055b2ebf5d64a01e087d17ec737b5d08c877e7fbbfa0b0ddd58e46306ecf8d096d66d5567d8fb064968c74cc507a7b46f8a98b2f20d87a03a09fe63788835cfeede87ebac124513ea3651876e554f4d"}, {0x48, 0x117, 0x6, "294e82303e1d10b9c4261aa69ae86a6edf619595fafce5d573193dd371a49129621ec0aa8bb9d5360c4d27e9de0de30332da08c409"}, {0x80, 0x29, 0x9, "d18aada264f94c7ff7655dc4c99bcdc0e700af40f81abae7c4a7be9a31161c8f09edfd1ea622f2f187d026ea14f8c44b700d06a7b7c3e127a48207db4bedc483f801994cd545ba3cb15151b0e74f5a822e0aa3324fa4f6f26bc21adcfa6826b3e68e87fcc7afce0505f9"}, {0x68, 0x1ff, 0xa1fd, "b4325cd818178b670b8d2e8add41476d9d2fd88293c12b87b5cc02a154f7061fbab712c4b9653a766b3ba7d58d6329ce5199429bd819c72e41b054cdf1376bd61f572aff2a9513ccc4e33f9615436794e79ca1e36388f4b7"}, {0xc8, 0x104, 0x50a5a2aa, "a9976ba32557608313ad4c792906a2efb706927ac50b2d3229d873d41a5e3c7bae279ddb7272f9a8e4059f109066b5a0ea3d6bb5b167e62907d73e70bbad8766f4b2ed0e590fb9e6579077373ebc1aebce10a5aa82f168f7ee87c5dfccb8bea63f29f8ef0d34091b73b4f1e57e4d3e58f43898ac2b6f846597eabfa9783fa1a8bf42549a730a1a885aae325872c99a1a673a60302459056324f2d81d0fd9e5229f4edf742bc2163a392450fbb39d52b4db"}], 0x2f0, 0x40000}, 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) [ 177.957162] ALSA: seq fatal error: cannot create timer (-22) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 3: ioctl$KVM_ENABLE_CAP(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000040)={0x79}) r0 = memfd_create(&(0x7f0000000240)='/dev/snd/midiC#D#\x00', 0x3) ioctl$KVM_PPC_GET_SMMU_INFO(r0, 0x8250aea6, &(0x7f0000000280)=""/159) stat(&(0x7f0000000480)='./file0\x00', &(0x7f0000001580)) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0x7fff, 0x4) r1 = syz_open_dev$sndmidi(&(0x7f00000000c0)='/dev/snd/midiC#D#\x00', 0x7955, 0x410000) r2 = openat(r1, &(0x7f0000000340)='./file1\x00', 0x280001, 0x40) r3 = perf_event_open(&(0x7f0000cccf88)={0x2, 0x78, 0xe12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3ff}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mkdir(&(0x7f0000001000)='./file0\x00', 0x0) mount(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200)='gfs2\x00', 0x0, &(0x7f0000000240)) close(0xffffffffffffffff) ioctl$DRM_IOCTL_AGP_INFO(r2, 0x80386433, &(0x7f0000000600)=""/85) setsockopt$ipx_IPX_TYPE(r1, 0x100, 0x1, &(0x7f0000000380)=0x3f, 0x4) close(r3) socketpair$inet_tcp(0x2, 0x1, 0x0, &(0x7f0000000140)) execve(&(0x7f0000000040)='./file0\x00', &(0x7f0000000240), &(0x7f0000000140)) ioctl$DRM_IOCTL_IRQ_BUSID(r0, 0xc0106403, &(0x7f0000000100)={0x0, 0x8c7, 0x80000001, 0x10001}) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$KVM_SET_CLOCK(r1, 0x4030ae7b, &(0x7f0000000080)={0x4, 0x7fff}) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0xfffffffffffffffd, r0) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf25030000005800010000000000000000010801000000000000000008000008000000000000fdffffff08000900460000000800050000000000140300ff020000000000000000000000ffff00080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1440bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4007405e3f6bc18000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0528f38c2e093001c1970add7c1b99fcd281a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) semctl$SEM_INFO(0x0, 0x0, 0x13, &(0x7f0000000000)=""/65) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) 2033/05/18 03:35:21 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e1589000000"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:21 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000018ff4)={0x10}, 0xc, &(0x7f0000013ff1)={&(0x7f0000000140)=ANY=[@ANYBLOB="14000069e84775ffffffffffffff0000010c0000"], 0x14}, 0x1}, 0x0) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f00000001c0)={0x7, r0, 0x1}) ioctl$SNDRV_CTL_IOCTL_TLV_COMMAND(r1, 0xc008551c, &(0x7f0000000200)={0x8, 0x1c, [0xffffffff, 0x4, 0x8000, 0x7c, 0x10001, 0xfff, 0xb5]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='rdma.current\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GET_UNIQUE(r2, 0xc0106401, &(0x7f0000000100)={0x81, &(0x7f0000000040)=""/129}) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000440)="26643718639b2f77080000", 0x1) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, &(0x7f00000001c0)={0x0, 0x7f}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000280)={r3, 0x5, 0x9}, 0x8) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r2, 0x84, 0xc, &(0x7f0000000080)=0xf6, 0x4) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) write$cgroup_type(r2, &(0x7f00000000c0)='threaded\x00', 0x9) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000100)) 2033/05/18 03:35:21 executing program 2: setrlimit(0xe, &(0x7f0000000080)={0x1}) syz_open_dev$amidi(&(0x7f00000005c0)='/dev/amidi#\x00', 0x8, 0x200000) getpgrp(0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) userfaultfd(0x0) r0 = syz_open_dev$loop(&(0x7f0000000b80)='/dev/loop#\x00', 0x0, 0x4006) r1 = memfd_create(&(0x7f0000000000)="74086e750000000000000000008c00", 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000400)={0x0, 0x0, 0x3, 0xffffffff}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000480)={0x0, @in={{0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}}, [0x7fff, 0x2, 0x3, 0x0, 0x0, 0x5, 0x6, 0x10001, 0x0, 0x200, 0x4, 0x3304, 0x6, 0x8, 0x3]}, &(0x7f0000000580)=0x100) getsockopt$inet_sctp_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000005c0)={0x0, 0x10001, 0x81, 0x9}, &(0x7f0000000600)=0x10) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e23, 0x81, @mcast2={0xff, 0x2, [], 0x1}, 0x7fff}}, 0x2, 0x4, 0xf8, 0x1, 0x40}, &(0x7f0000000700)=0x98) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000740)={0x0, 0x200}, &(0x7f0000000340)=0x8) pselect6(0x40, &(0x7f0000000a80)={0x28b, 0x3, 0x9, 0x0, 0xff, 0x0, 0x0, 0x10000}, &(0x7f0000000b00)={0x92a, 0x7, 0x7fff, 0x9, 0x200, 0x5, 0x8, 0x1f}, &(0x7f0000000b40)={0x80000001, 0x81, 0x2, 0x4, 0x3, 0x7, 0xb3f5, 0x37ef}, &(0x7f0000000bc0), &(0x7f0000000c40)={&(0x7f0000000c00), 0x8}) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000780)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x6, @mcast1={0xff, 0x1, [], 0x1}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}], 0x2c) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r3, 0xc1205531, &(0x7f0000000940)={0xffff, 0x1, 0x139, 0x101, [], [], [], 0x4, 0x7, 0x9, 0xab3a, "2b464c6cec0cd9c1139e4fb1e1168e4d"}) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f00000008c0)={0x0, 0x1b5}, &(0x7f0000000900)=0x8) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000007c0)={r2, 0x0, 0x44}, 0x2bf) sendmsg$inet_sctp(r1, &(0x7f0000000ac0)={&(0x7f0000000280)=@in={0x2, 0x4e20}, 0x10, &(0x7f00000003c0)=[{&(0x7f00000002c0)="b25b2002e7d8bc055c7d9ed742f2ca865f150419606e27d187b4ce0f2f81d8a0ab0d18a71f265b68c86f9c82600911dcc4698a4baebfb56adf90bec347c735957300af9e7be0f2f2492412d9053dab543361b8e3cd8dff0e3d8a9e8477af536ae10c28fe546c40f786497632eb496a1d58804e3b2b8e12dc", 0x78}], 0x1, &(0x7f0000000940), 0x0, 0x24000001}, 0x0) ioctl$sock_ifreq(0xffffffffffffffff, 0x0, &(0x7f0000000240)={'ipddp0\x00', @ifru_mtu=0x1}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r0, &(0x7f0000000080), 0x102000004) ioctl$LOOP_CLR_FD(r0, 0x4c01) dup(r1) nanosleep(&(0x7f00000001c0)={0x77359400}, &(0x7f0000000380)) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) creat(&(0x7f0000000000)='./control/file0\x00', 0x0) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) ioctl$KVM_ASSIGN_SET_INTX_MASK(r1, 0x4040aea4, &(0x7f0000000080)={0x3f, 0x8, 0xaf2, 0x1, 0xfff}) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:21 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) accept4$netrom(r0, 0x0, &(0x7f0000000080), 0x800) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 3: r0 = creat(&(0x7f0000000100)='./file1\x00', 0x0) mkdir(&(0x7f000000dff6)='./control\x00', 0x0) pwrite64(r0, &(0x7f0000000140)="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", 0x1000, 0x0) r1 = open(&(0x7f0000000040)='./control\x00', 0x104, 0x80) mkdirat(r1, &(0x7f0000044ff6)='./control\x00', 0x0) r2 = fanotify_init(0x0, 0x0) fanotify_mark(r2, 0x11, 0x40000002, r1, &(0x7f0000000000)='./control\x00') fallocate(r0, 0x0, 0x0, 0x5) r3 = open(&(0x7f00000000c0)='./file0\x00', 0x28042, 0x0) fallocate(r3, 0x0, 0x0, 0x73e0) memfd_create(&(0x7f0000000080)='eth0nodev\x00', 0x3) 2033/05/18 03:35:21 executing program 2: add_key(&(0x7f0000016ff8)='keyring\x00', &(0x7f000000b000)={0x73, 0x79, 0x7a, 0x0}, 0x0, 0x0, 0xffffffffffffffff) r0 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x2000) open_by_handle_at(r0, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x400400) mknod(&(0x7f0000000840)='./file0\x00', 0x0, 0x0) r1 = syz_fuse_mount(&(0x7f0000000080)='./file0\x00', 0x8000, 0x0, 0x0, 0x0, 0x0) ioctl$EVIOCSABS3F(0xffffffffffffffff, 0x401845ff, &(0x7f0000000240)={0x7, 0x0, 0x0, 0x2, 0x0, 0x9}) connect$netlink(r0, &(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x40000000}, 0xc) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000300)={0x3f, 0x1800, 0x200, 0x2, 0x5, 0x0, 0x8, 0xe1, 0x0}, &(0x7f0000000340)=0x20) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f0000000500)={r2, 0x4}, &(0x7f0000000540)=0x8) mknod(&(0x7f0000000780)='./file0\x00', 0x80, 0x1) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f00000033c0)=[{&(0x7f00000004c0)=@in6={0xa, 0x4e20, 0x20, @dev={0xfe, 0x80, [], 0x1a}, 0x1}, 0x1c, &(0x7f00000009c0)=[{&(0x7f0000000800)="db80035f20114787315d59a15b2392c2ffcd116cdbf1b49bad32ad64ea8e2996830bf7cd9a80591229bec7985941bb4004d4bd27ff8c9aa24855", 0x3a}], 0x1, &(0x7f0000000a00), 0x0, 0x8080}, {&(0x7f0000000c40)=@in={0x2, 0x4e22, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000000f40)=[{&(0x7f0000000c80)="427854bf992bbe63f51472aacb95c19b0d2626836253aaa837", 0x19}, {&(0x7f0000000e00)="53622f7858466f47e582b600cdb988ae4b87c415b7104d95ed36a15e9ec1b7f24215c0f695536ef00bd6e31d93016a93976b9f38c02294b0c96f50eb2dbcb7236f59137c288967cb9fd91beea889bd4523ba54e0c2a36a9d810908ab75bef3f7d36387e00e0622f8fd82dd32c3ab515420b2d28cb0d4cf992c01807f037930e2e06e4d8c141521f96b370043921d2c66d16d0a61c5e4c90a6dbeb6699de02cec770fec7c505589273f121f4ad8bf3187c40996c13b10e0cbabcd91fb8d8cc4483dedf3deb436a9691e0df4dc7eab1402ef454d84c20b1ab99578b30ad8710c91", 0xe0}], 0x2, &(0x7f0000000fc0)=[@init={0x18, 0x84, 0x0, {0x3, 0x7fff, 0x5, 0x2}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x9, 0x4, 0xb, 0x9, 0xa2, 0x0, 0x1f, r3}}, @init={0x18, 0x84, 0x0, {0x8, 0x6, 0x9, 0x3}}], 0x90, 0x4}, {&(0x7f0000001080)=@in={0x2, 0x4e24, @loopback=0x7f000001}, 0x10, &(0x7f0000001180)=[{&(0x7f00000010c0)="4f8470b42375f3d69d080030f184b73ab01af21bdd0550da019e5c1f4a000b21a62a87f1ced7c1cc79251d5a95de6b9e913d1fc59509ef943731bf1610e2a4a3341fe75c5abac7c7f47e54485124bb065d68f7b8edcfa251ade61a77048df99f556cb09728a3eb1bb9316210b3de7783caae21250494f475b7c57d136349bcddd5ab70da1eeb", 0x86}], 0x1, &(0x7f00000011c0), 0x0, 0x4}, {&(0x7f0000002c80)=@in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10, &(0x7f0000003140)=[{&(0x7f0000002cc0)="a1cc9ea0d9ed11c375e2ad9a8e45aa71b73d8af162f7245fb131bc9bc8282c32a14bdf500172d760d8e7cc64a4542cea43ec8cfb371d7277424e68c6bbb83f5b868ed076e353a54c9052a892ef9a6daa6e0682e1093dd4f5524793a05f530021f7151e6107e02c2351", 0x69}, {&(0x7f0000002fc0)="b8062e3a4668dcc96d3bde27d00ed178c6ea4dec605a5e8e6acb7c18e71c7a40e26aea51d5cfdd78d4626b3de68eae508c7241ef9eecef08fb92685f44661c17e8bef08d6ee8f1caa1f5b2acec5c3b5e3fb291c60c4ac4ce19b0be0e4db29945d9c7218928960be0222d2bac773f0ae566a89ba9c5530a8b576cb70dda87877b7804b7499bf24c92abec5985030e86", 0x8f}], 0x2, &(0x7f00000031c0)=[@init={0x18, 0x84, 0x0, {0xfffffffffffffff9, 0x700000000000, 0x1, 0xfffffffffffffffa}}, @sndinfo={0x20, 0x84, 0x2, {0x7, 0x0, 0x2, 0x4, r2}}, @init={0x18, 0x84, 0x0, {0xfff, 0x4, 0x3f}}, @sndinfo={0x20, 0x84, 0x2, {0x6d, 0x8, 0x5, 0x2, r3}}, @sndrcv={0x30, 0x84, 0x1, {0xfffffffffffffff9, 0x6, 0x8002, 0x1f, 0xb0c, 0x9, 0x1000, 0x9, r3}}, @init={0x18, 0x84, 0x0, {0x86, 0x8000, 0xce6, 0x20}}, @sndinfo={0x20, 0x84, 0x2, {0x6, 0x20d, 0x2, 0x0, r3}}, @init={0x18, 0x84, 0x0, {0x8001, 0x3, 0x80, 0x5c9b}}, @sndrcv={0x30, 0x84, 0x1, {0x3f, 0xa0e, 0x6, 0x1, 0x7ff, 0x1b2, 0x6fe, 0x5, r3}}], 0x1b0, 0x80}], 0x4, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000140)={0x0, 0xfbd, 0x2, 0x3, 0x4, 0xfffffffffffffffc}, &(0x7f0000000180)=0x14) dup2(0xffffffffffffffff, 0xffffffffffffffff) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000886ff0)={0x2, 0x3, @broadcast=0xffffffff}, 0x10) sendto$inet(r5, &(0x7f0000d59f8d), 0x63ca9c1, 0x20000803, &(0x7f0000e1e000)={0x2, 0x3, @loopback=0x7f000001}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='ip_vti0\x00', 0x10) readv(r5, &(0x7f00007d6fb0)=[{&(0x7f0000b7e000)=""/4096, 0x1000}], 0x1) ioctl$sock_bt_cmtp_CMTPCONNDEL(0xffffffffffffffff, 0x400443c9, &(0x7f0000000580)={{0xda, 0x8, 0x7f, 0x1000000, 0x80, 0x7}, 0x3}) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x5, 0x2}, 0x10) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000a00)={r3, 0x1}, &(0x7f0000003580)=0x8) preadv(r1, &(0x7f0000000100)=[{&(0x7f00000000c0)=""/55, 0x37}], 0x1, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000007c0)=0x1f, 0x4) umount2(&(0x7f0000000200)='./file0\x00', 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000400)={'mangle\x00'}, &(0x7f0000000480)=0x54) 2033/05/18 03:35:21 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, &(0x7f00000000c0)=r1) sendfile(r0, r1, &(0x7f0000000000)=0xfffffffffffffffd, 0x40) openat$cgroup_type(r1, &(0x7f0000000080)='cgroup.type\x00', 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:21 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f00000006c0)={0x0, 0x16, "fd55b39ea2bead27c9a914477c7ce28cd0ba9605c5ad"}, &(0x7f0000000700)=0x1e) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={r9, 0xfdb3, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xfffffffffffffe26) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r10, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r11 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r11, 0x84, 0x11, &(0x7f0000000500)={r12, 0x6}, 0x8) 2033/05/18 03:35:22 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e1589000000"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) prctl$setmm(0x23, 0x1, &(0x7f0000ffb000/0x5000)=nil) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) getsockname$packet(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000280)=0x14) setsockopt$packet_drop_memb(r1, 0x107, 0x2, &(0x7f00000002c0)={r3, 0x1, 0x6}, 0x10) sendfile(r2, r1, &(0x7f0000000080), 0x3) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r1, 0x800448d3, &(0x7f0000000180)={{0x4, 0x101, 0x1, 0x4, 0x9}, 0x7fff, 0x0, 0x10001, 0xfffffffffffffbd7, 0x101, "da787de238cced7467f41532d720400a4f2423b30063a2859c395cc685d32f461fd0329eab74848c41447353d0fcae562db5298055f7fc09b455675ede180eea8646f171244f2b21800716e24a562d7849ed75b64b3ce9aaaeb88cfd951b76973456a894609a5fd9e63fd009ddb1622cf38bada477647f9c7b112377611c6930"}) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) socketpair$inet_icmp(0x2, 0x2, 0x1, &(0x7f0000000300)) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100)='/dev/kvm\x00', 0x0, 0x0) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ppp\x00', 0x4000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)={0x4, 0x6, 0x700, 0x572, 0x2, r1, 0x9}, 0x2c) ioctl$KVM_GET_SUPPORTED_CPUID(r0, 0xc008ae05, &(0x7f0000000140)=""/240) 2033/05/18 03:35:22 executing program 2: r0 = syz_open_dev$mouse(&(0x7f0000000040)='/dev/input/mouse#\x00', 0x9, 0x4600) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r0, 0x84, 0x12, &(0x7f0000000140)=0x1, 0x4) getsockname$packet(0xffffffffffffff9c, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @random}, &(0x7f00000000c0)=0x14) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000100)={@ipv4={[], [0xff, 0xff], @multicast2=0xe0000002}, 0x3a, r1}) r2 = socket$inet6(0xa, 0x1, 0x8010000000000084) setsockopt$inet6_int(r2, 0x29, 0x46, &(0x7f0000000000), 0x1) r3 = socket$packet(0x11, 0x800000000002, 0x300) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000180)={0x0}, &(0x7f00000001c0)=0xc) ioctl$TIOCNXCL(r0, 0x540d) sched_getscheduler(r4) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f000095bffc), 0x4) sendto$inet6(r2, &(0x7f00005a0fff)='8', 0x1, 0x0, &(0x7f00007bcfe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) 2033/05/18 03:35:22 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = syz_open_dev$audion(&(0x7f0000000100)='/dev/audio#\x00', 0x29a0000, 0x80) getsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000140), &(0x7f0000000180)=0x4) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0xfffffffffffffffe, 0x80040) ioctl$KVM_SET_ONE_REG(r1, 0x4010aeac, &(0x7f00000001c0)={0x10001, 0x5}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f0000000000), 0x3) ioctl$sock_bt_cmtp_CMTPCONNADD(r2, 0x400443c8, &(0x7f0000000340)={r2, 0xffffffffffffffc1}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000280)={0x3, &(0x7f0000000200)=[{0x8, 0x3, 0x4, 0x9}, {0x5b4, 0x0, 0x3, 0x3}, {0x5, 0x0, 0x9, 0x3ff}]}, 0x10) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x1) ioctl$PIO_UNIMAP(r2, 0x4b67, &(0x7f0000000300)={0x2, &(0x7f00000002c0)=[{0x9}, {0x7, 0x1}]}) ioctl$FIONREAD(r2, 0x541b, &(0x7f00000000c0)) 2033/05/18 03:35:22 executing program 3: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) epoll_wait(r0, &(0x7f0000000040)=[{}], 0x1, 0x3) 2033/05/18 03:35:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000000)) sendfile(r0, r1, &(0x7f0000000080)=0xfffffffffffffffd, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f0000000080)='/dev/loop#\x00', 0x10000000000, 0x80) r1 = memfd_create(&(0x7f0000000280)="00dc6a070b85e2a390a01b0c7ec8c1fa47c6d00ec84828675865599c94a8ae4b22a61bcc919bbddf4c4558518f3bddf10d0da339c79f9f7ac7cece6fef5f13bad7bd400f73de28f8ac4defc55cabc846eb024876370e7fb1252bd81211d3777303baf7e398fca0501f956c33eaabefd251cbf47556890fd9346eb8fa085c4a21c4b98602f526a9c02eda6f5e2414a6a0a9cb47219d32402bbe717d1b6cd917846f82c1f860f43b2997deb9dc041917618268f1d85337a95ee562923752c83413dc6c2da114000000000000000000000000000000", 0x81) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f00000000c0), 0x20000000000003) ioctl$LOOP_CLR_FD(r0, 0x4c01) r2 = msgget(0x3, 0x5d2) msgctl$MSG_STAT(r2, 0xb, &(0x7f0000000000)=""/3) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000, 0x0, &(0x7f0000ffe000/0x2000)=nil) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f4102"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) fcntl$setlease(r0, 0x400, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r2) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="0903f7e01f4ee9f41adf4a5065ed2954df2e5ad90be9e646f92dc4177e72102e7944a6561cd4a44f315bb2ce3bb90d1541ac290a6661339e84cda05c382bad107f125e20d6f19cc29b99700bc5", 0x4d, 0x0, &(0x7f0000cc7fe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1}}, 0x1c) r0 = syz_open_dev$mice(&(0x7f0000000340)='/dev/input/mice\x00', 0x0, 0x101801) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffffff8, 'queue1\x00', 0xcd}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000100)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x800) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/usbmon#\x00', 0xfffffffffffffffd) fdatasync(r0) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000040)) 2033/05/18 03:35:22 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 3: mlock(&(0x7f0000723000/0x4000)=nil, 0x4000) perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$inet(0x2, 0x806, 0x0) setsockopt$inet_opts(r0, 0x0, 0x0, &(0x7f0000b5f000), 0x0) setsockopt$inet_opts(r0, 0x0, 0x4, &(0x7f0000000100), 0x0) mremap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4000, 0x4, &(0x7f0000ffc000/0x4000)=nil) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0) mq_open(&(0x7f0000000380)='/dev/amidi#\x00', 0x1, 0x8, &(0x7f00000003c0)={0x80000000, 0x5, 0x5, 0x7fff, 0xfe, 0x3f, 0x2, 0x7}) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000100)={0x0, 0xfffffffffffeffff}, &(0x7f0000000140)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0x7d, "f6a1763faf8e567b06fe59a19bca15bc18457a0182f88123e5d0e7c2417fef5efd144773845c912b0cf0a370e876437e1c95a95d75a4776b7b1137ed03a58ce33270d55711c85c843c9b8db4de751f01d03cda8ac188e12b0e9b9a6c1f1aa3bdc2d42dbe80a2d59ad50f0b963e203017e07f096ef5084e4f954c9f1160"}, &(0x7f0000000240)=0x85) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000280)={r1, 0x4, 0xffffffff, 0xf1, 0x0, 0xfff, 0x7f, 0xfffffffffffffffb, {r2, @in={{0x2, 0x4e20, @remote={0xac, 0x14, 0x14, 0xbb}}}, 0x3f, 0x4, 0x9, 0x6, 0x1f80000000000000}}, &(0x7f0000000340)=0xb0) r3 = syz_open_dev$amidi(&(0x7f0000000040)='/dev/amidi#\x00', 0xfc, 0x400) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000400)=[@in={0x2, 0x4e23, @loopback=0x7f000001}, @in6={0xa, 0x4e23, 0x5935, @local={0xfe, 0x80, [], 0xaa}, 0x5}, @in6={0xa, 0x4e21, 0x45dad00f, @loopback={0x0, 0x1}}], 0x48) write$cgroup_int(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="3d9a8e700578b0"], 0x7) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffff9c, 0x84, 0x6d, &(0x7f00000000c0)=ANY=[@ANYRES32=0x0, @ANYRES32=r0], &(0x7f00000013c0)=0x2) 2033/05/18 03:35:22 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f0000000500)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(r0, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000700)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bc540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54a39d5ee1b9e659487bf4a4a829cad4aa1f8aaad8c42956ed584c93244119db6d02039b3225b7c8329e913ad01b9ec593cd00ca0e615909393c3a74fc55ed16b88deeee6e02761b2b683dd74336f38cce1deb1047636e3168f982dcd1540cb2f3d4b13ebb6c7b851ab6265b112a79fbe8badef5a1483deff5fc54000000000000000000000000", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r4, 0x10e, 0x1008, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0171533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb0311d9a126932a13db86cb30d63b55495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a50442b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25c85c540be214c9771c7b4e22e"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) 2033/05/18 03:35:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) memfd_create(&(0x7f0000000080)='\x00', 0x1) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f4102"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:22 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) clock_gettime(0x0, &(0x7f0000000080)={0x0, 0x0}) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r1, 0xc4c85512, &(0x7f0000000280)={{0x7, 0x2, 0x9, 0x9, "7e1f99542ce36bcd29b5b53c38472d1e9e84f5199458187ee4ff8368da674a5c1b7e17615f8748fad5c562c8", 0xfffffffffffffff9}, 0x0, [0x2, 0x8, 0x9, 0xffffffffffff4d31, 0x100000000, 0x7, 0x1, 0x81, 0x100000001, 0x1000, 0x8, 0x8, 0xffffffffffffffaf, 0x4, 0x0, 0x1, 0x3, 0xab, 0x0, 0xa1, 0x1, 0x4, 0x9, 0x9, 0x4, 0x7f, 0xfffffffffffffffc, 0x8001, 0x2, 0xffffffffffffffe1, 0x8001, 0x7ff, 0x2, 0x0, 0x1f, 0x5, 0x5, 0xfffffffffffffff7, 0x2, 0x10000, 0x9, 0x6, 0x7f, 0x40, 0x5fe0, 0x800, 0x3, 0x1, 0x7fffffff, 0x80000000, 0xffffffffffffffff, 0x81, 0xfffffffffffffffe, 0x1, 0x40, 0x3, 0xfff, 0xfff, 0x7fff, 0x30f, 0xfffffffffffffff7, 0x7ff, 0x20, 0x8, 0x6, 0x4d2, 0x9, 0x70ae, 0x4, 0x10, 0x6, 0x7181, 0x0, 0x4, 0x1, 0x400, 0x0, 0x1, 0x6, 0x3, 0x8, 0x61, 0x1, 0x5, 0x6, 0x7, 0x1, 0x100000000, 0x4, 0x0, 0xa473, 0x8c, 0x7, 0x1ff, 0x3, 0x9, 0x3, 0x6b, 0xfffffffffffffffd, 0x3f, 0x3, 0x7, 0xec0a, 0x8, 0x6, 0x7f, 0x7, 0x7, 0x9, 0x6, 0x3, 0x3, 0x3, 0x7fff, 0x20, 0x37834890, 0x10000, 0xbd, 0x9, 0x4, 0x8, 0x3ff, 0x10000, 0x400, 0x4, 0x800, 0x7, 0x100000001], {r2, r3+10000000}}) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 2: mmap(&(0x7f000023d000/0x600000)=nil, 0x600000, 0xc, 0x32, 0xffffffffffffffff, 0x0) r0 = accept4$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, @broadcast}, &(0x7f0000000080)=0x10, 0x80800) getpeername(r0, &(0x7f0000000180)=@ax25, &(0x7f0000000140)=0x80) setrlimit(0xffffff, &(0x7f0000000000)={0x10000000004, 0x200}) 2033/05/18 03:35:22 executing program 2: perf_event_open(&(0x7f000001d000)={0x2, 0x78, 0xe2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup\x00', 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000000)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000040)={[0x30]}, 0x1) r2 = creat(&(0x7f0000000080)='./file0\x00', 0x60) ioctl$LOOP_CTL_GET_FREE(r2, 0x4c82) fcntl$F_GET_RW_HINT(r2, 0x40b, &(0x7f00000000c0)) r3 = request_key(&(0x7f00000001c0)='big_key\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000240)='posix_acl_accesscgroup\x00', 0xfffffffffffffff9) keyctl$clear(0x7, r3) sendto(r2, &(0x7f0000000140)="882d3dc02d5cb31b10a94a40f3", 0xd, 0x10, &(0x7f00000002c0)=@sco={0x1f, {0x10001, 0xa9cd, 0x3, 0xfffffffffffffffc, 0x4, 0x8}}, 0x80) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r2, 0x800442d2, &(0x7f0000000180)={0x2, &(0x7f0000000280)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @dev}]}) 2033/05/18 03:35:22 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000080)={'bridge0\x00', 0x1}) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f000068b000)='io\x00') bind$alg(r2, &(0x7f0000d59fa8)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r4 = accept4$alg(r2, 0x0, 0x0, 0x0) sendfile(r4, r3, &(0x7f0000000140)=0x45, 0x1) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:22 executing program 3: socket$key(0xf, 0x3, 0x2) ioctl$TUNGETFEATURES(0xffffffffffffffff, 0x800454cf, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0x6, &(0x7f0000000080)=@raw=[@alu={0x4, 0x3, 0x7, 0x2, 0x7}, @ldst={0x2, 0x1, 0x2, 0x7, 0x6, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4b6}], &(0x7f00000000c0)='syzkaller\x00', 0x9, 0x61, &(0x7f0000000100)=""/97, 0x41100}, 0x48) 2033/05/18 03:35:22 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(0xffffffffffffffff, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:22 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 3: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) pipe2(&(0x7f0000e3eff8)={0x0, 0x0}, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) dup3(r4, r3, 0x0) ppoll(&(0x7f00000000c0)=[{r2, 0x2}], 0x1, &(0x7f00000001c0), &(0x7f0000000080), 0x8) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f4102"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000080)={@dev={0xfe, 0x80, [], 0xf}, 0x5, 0x2, 0x1, 0x9, 0x9, 0x7, 0x7}, &(0x7f00000000c0)=0x20) exit_group(0xe8) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 2: r0 = syz_open_procfs(0x0, &(0x7f0000000440)='net/dev_snmp6\x00') pkey_mprotect(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0xffffffffffffffff) getdents64(r0, &(0x7f0000000df0)=""/528, 0x210) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, &(0x7f0000000180)=""/146) sendfile(r0, r1, &(0x7f0000000000), 0x3) fcntl$addseals(r1, 0x409, 0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000700)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f00000006c0)={0xfffffffffffffffd, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f8208f3ffffffffffff859a7414ce1fd3cc20b95f3e25a0524fca08000000000000001970ad280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb09d074b07c0cb2a8fee69450c7fe191e5e72d5389963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf7466c3609cdc15a44192d6c762ecd4f0535ab78433c25e85305ff2697d8b85d267483a7a812faf8bd1c0d8180b8765d31b7314a6a48a594ef352f0e2c88b9b37e3d0e587d5dd6da635000000000000000000000000"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:23 executing program 2: r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast1={0xff, 0x1, [], 0x1}, 0x0, 0x0, 0x0, 0xc}, 0x20) ioctl$sock_SIOCGIFCONF(r0, 0x8910, &(0x7f0000000000)) setsockopt$inet_sctp6_SCTP_INITMSG(r0, 0x84, 0x2, &(0x7f0000000040)={0xffffffffffffffff, 0x9, 0xfff, 0x3}, 0x8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000080)={0x1, 0x4c, 0x2, 0x10005, 0x101}, 0x9) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffff9c, 0x84, 0x1a, &(0x7f0000000140)={0x0, 0x6e, "545e893bcffa9d9be7cc38849f0914afe8f55f0ce302b1c00ac8f0f84e06ffa16cbd770b69e0a7e145e146fb8a6c505471235ead2a55a2a25efedc0c678fb296e490661ae5789f218d4bc7b1a57c0cffe8da205c69b4091e8340388c8cd852f16529e9c036601f543c563450d667"}, &(0x7f00000000c0)=0x76) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000001c0)=@sack_info={r1, 0xfff, 0x81}, &(0x7f0000000200)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f0000000240)=[@in6={0xa, 0x4e22, 0xff, @empty, 0x100800000}, @in6={0xa, 0x4e22, 0x7, @empty, 0x9}, @in6={0xa, 0x4e22, 0x9, @local={0xfe, 0x80, [], 0xaa}, 0x5}, @in6={0xa, 0x4e21, 0x4, @mcast1={0xff, 0x1, [], 0x1}, 0x7}, @in={0x2, 0x4e21, @remote={0xac, 0x14, 0x14, 0xbb}}, @in={0x2, 0x4e22, @multicast1=0xe0000001}, @in6={0xa, 0x4e20, 0xffff, @remote={0xfe, 0x80, [], 0xbb}, 0x400}], 0xac) 2033/05/18 03:35:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000080)={0x0, 0x3f, 0x0, 0x80000001, 0x30000000000}, &(0x7f00000000c0)=0x18) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000100)={r2, 0x5}, &(0x7f0000000180)=0x8) r3 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r3, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r3) sendfile(r1, r3, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = syz_open_procfs(0x0, &(0x7f0000000080)='attr/fscreate\x00') ioctl$TIOCMBIC(r1, 0x5417, &(0x7f00000000c0)=0x7) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) sendfile(r0, r2, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 179.414137] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 3: r0 = add_key(&(0x7f0000000080)='dns_resolver\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$clear(0x7, r0) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f00000001c0)="2700000014000785fb30a200120f0a00111b01ff7f0000000000007a3e0e49d6a90600d6ec0000", 0x27) r2 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0xfffffffffffff001, 0x81) ioctl$PERF_EVENT_IOC_QUERY_BPF(r2, 0xc008240a, &(0x7f0000000040)={0xa, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(r1, 0xc010640b, &(0x7f00000000c0)={0x0, 0x0, 0xff}) close(r1) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r1, 0xc00c642e, &(0x7f0000000180)={r2, 0x80000, r1}) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={0x0, @in6={{0xa, 0x4e23, 0xff, @local={0xfe, 0x80, [], 0xaa}, 0x4}}}, &(0x7f00000001c0)=0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000400)=ANY=[@ANYRES32=r3, @ANYBLOB="93c40200da0f07005ec2daaf7ce2b12fd2a63eb901e86597137128f9686eb8b82ad4887ebcb025458b614cb042668817ae7f196be43d9e9288564e0a9ab8f4508f33ae"], &(0x7f0000000340)=0xc) get_thread_area(&(0x7f0000000080)={0x100000000, 0x100000, 0x1000, 0x0, 0x9, 0x8000, 0x8, 0x6, 0x2, 0x7}) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) [ 179.469367] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 2: r0 = socket(0x0, 0x0, 0x0) perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x3e3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000740), &(0x7f0000000840)}) fstat(0xffffffffffffffff, &(0x7f00000002c0)) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000a80)={0x0, 0x0, 0x8}, 0xc) r1 = socket$inet(0x2, 0x2000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x2, 0x418, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000280], 0x0, &(0x7f0000000240), &(0x7f0000000280)=ANY=[@ANYBLOB="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"]}, 0x490) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000180)=@broute={'broute\x00', 0x20, 0x0, 0xc0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, &(0x7f0000000080), &(0x7f0000000700)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000001200000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000aac651332164320476438da5d68c26409c99cba8ffcf"]}, 0x14e) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f0000000600)={{{@in6=@dev={0xfe, 0x80, [], 0xf}, @in=@multicast1=0xe0000001, 0x0, 0x5, 0x4e22, 0x3602f7b6, 0xa, 0x0, 0x20}, {0x0, 0x3, 0x9, 0x0, 0x0, 0x0, 0x7, 0x3}, {0x5d4, 0x1, 0x9}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in6=@loopback={0x0, 0x1}, 0x4d2}, 0x0, @in=@loopback=0x7f000001, 0x0, 0x0, 0x0, 0x0, 0x8, 0x5a9}}, 0xe8) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000080)={0x0, 0x7, 0x800000c3, 0x0, 0x0, 0xe0c}, 0xc) accept4$ipx(0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=0x10, 0x0) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r1, 0x4c01) msgget$private(0x0, 0x109) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r2, 0x84, 0x6c, &(0x7f0000000180)={0x0, 0xa7, "573962ad8a1b3d9b8e7037830f3887b9feca01ab6994eda55212ef30d2c56a07be34b95a3cac0aef79efbcca7100d65525fa95b3561629966c1a85eb872e87517b6c04c22431ff79e5116cbee642ac000c3a16296957be38df66e8bccc9cccbe4199c9e4d0031968dfa8f882b54f78f24c863f5d1cab7ec39db3515b39215c80bad8e87433eff16d07e2b8b735a6e013664c7ae62c6a0119b0116fcc4baf8b8f3265fdcfd0f11b"}, &(0x7f00000000c0)=0xaf) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r3, @in6={{0xa, 0x4e24, 0x1, @loopback={0x0, 0x1}, 0x6}}}, 0x84) unlinkat(r2, &(0x7f0000000080)='./file0\x00', 0x200) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000100)) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f00000000c0)=0x0) getpgrp(r1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r3 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r2) fcntl$F_SET_FILE_RW_HINT(r3, 0x40e, &(0x7f0000000080)=0x4) sendfile(r0, r2, &(0x7f0000000000), 0x3) getresgid(&(0x7f0000000180), &(0x7f00000001c0), &(0x7f0000000200)) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x5) [ 179.632393] kernel msg: ebtables bug: please report to author: Wrong len argument 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 6: r0 = creat(&(0x7f0000000000)='./file0\x00', 0x23) ioctl$TCXONC(r0, 0x540a, 0x6) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x0) getsockopt$IP_VS_SO_GET_TIMEOUT(r2, 0x0, 0x486, &(0x7f00000001c0), &(0x7f0000000200)=0xc) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r3 = syz_open_dev$loop(&(0x7f00000000c0)='/dev/loop#\x00', 0x82, 0x200000000000000) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) setsockopt$EBT_SO_SET_COUNTERS(r0, 0x0, 0x81, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x68) sendfile(r1, r3, &(0x7f0000000080), 0xf1) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x0, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000100)) 2033/05/18 03:35:23 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x3}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:23 executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000)='/dev/snd/pcmC#D#c\x00', 0x7, 0x41) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) ppoll(&(0x7f00000000c0)=[{r0, 0x4112}], 0x1, &(0x7f0000000140)={0x0, r2+10000000}, &(0x7f0000000180), 0x8) 2033/05/18 03:35:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000000600)=[{&(0x7f0000000180)="440a4227921a36937570d7842ebd3eca74b5cbdacd650c7d228a92956956bcc907d890f525e7136fa2c9dbb3e9d8c966a40999feaaa9022877c787911512aebd94d4f9f2293688e933195ef86640b6b2cf7879366218683994e296715ff58985d06e604e32fef75871c466e688b8f0b18d8e34a8b49c6876201c8a38f92fcc67140d2394f25524f1"}, {&(0x7f0000000280)="4c713923bde6d59511e9b65a51f43f5dc70bb2ade867e70dad9b973fea772c8a7162c31dfc27c3141d71072f4e393a66f3caed0d87299aec9fc0d981ec9c130432a0f4613da398c5c1bcd92e34bc03fd7766d45250b8f0b35b9cba964542cb658e26388f5cc2b0214782cdc92cf09862633b3c674ae229ec3c3ebd858778035d9258665a7cd8f21ef09ba1d117217768caec457a6f70e6e816f17b4b466ee6cbc5778e8fe708a48a19f22e8fb4b5b55653c2d88d132d47c155d8eff366029cce05f9237ca8fea4913621e41d50e0a4f1ef59c67989"}, {&(0x7f00000000c0)="7aaadf5d69b26ffa870c099cd03a44a6cd65a7e0914b489a124f4209ad958b16"}, {&(0x7f0000000380)="1c109c9af4d3367c318f339279f1304abe23628da700b25c056f0424684f6982b73bc84a81c704c8cfc9e76743a493179c1486fbb4e92c60c788bdb3b07eda3db4de22b43ac169ed44465912494dcceb18a6ebeeab8355b032ac2f78660def84f99b3f17f0889fca35a76d1b3488f4ccc37b628ec8f81ade8173becfbade5b9f0b1f811a8729babfe4f61450be1519dea946a03e3fada93da6bfb3d563045d1f094bb241e36d27f4591eaa773f41d70486f3354eb26efe0921c71d7e46d949f20760cf259915659d5e"}, {&(0x7f0000000480)="2e7b02abd0b160bcd38fe65e7021e24f05ed09e6b9c83b1ab0c5517b751e170443fea9eb5477446ae7d4f98c1d7560589a411c37c28a8ff400ee1175c5381bd3133994b04774c513c411bb5ac791443ef0274deb2273f5ab4bc0c15fabc34526b6f4e1c89fe5d0a401de645d7627c5526c38b105e1499a0cdf"}, {&(0x7f0000000500)="4f12e97f786f413fb283f1504698d5574ca1e77412c127577160dd6ecadc6980d0c6ea5669154efc1ed93a54ec33574e50aa7ce390d502413590640365dabb52697da19f6fe692cefccda73b6ebb55ee1c85adf27d3eebabb4d9b82b333c5243e0493208fc576d29c51af8387f6f44e0e48dc8ab6e6268f2"}, {&(0x7f0000000580)="be1d39781a18fd2541b023df2f6720cbbfd18cbfbefb78a1d9c6715b57683eea8d37e734d6ec78b6d77b5f27f80bf9825a9a533b282e1b67bb98867529e7c0ddd0c38ad9cd9fbf04ab0547603fcc3629f11944a9b54465389ec62f005bfaea8837672c1661e0c154eb0eec3c94b8830c0690458c"}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) [ 179.692145] kernel msg: ebtables bug: please report to author: Wrong len argument 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000100)) [ 179.815625] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setitimer(0x0, &(0x7f00000000c0)={{0x77359400}, {0x0, 0x2710}}, &(0x7f0000000100)) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r2, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="aa", 0x1f6}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000c9df6238624f899a09088870f4464e791dc0299b4f241892560cca6dd0c97d0f59dd62505a24827f7f041b17b6854dd0e25bbf6a0a3ace95cd05ad22af95f21136341bd76b1b3d2b01f9497390a3c98580ce51ef0bee45ffc68f93527842a600fdfa77e2f4110e017ad87475b90e1127be18a9168ace29f38aca5ead178d40fc7bbc253bd22e7f989257e11987a243a478621f002128bcabc4c9ab321ede13d087c9fd5c322fa66006a7f65e767bfd26f61529f3425b68356e01393f186bf4a1cf7347390b7852827ea8cf1a5d51a179c3ce73eb86ff83bf1277c5e9a11a8096212279758545d8127b80328e18d90dc580714e147d5607c4822fcf4d94c08ee2335d4bdd96876beb8fb05be7bcaafb5500000000000000000000003084c5212362b7527db2b3bba0715541ca7b229d3fd702a402cb3e2427fd3f8452f3567f5ffbf5ccf5418731ea42076d08c80276bf1246720729516c4ecafc3533a347dc536cacf7bfaf845f9aaa4cf6ff76bf391b64cbadf5b542cc3f7f25ee32db2cc2b919b8c180abaee318bf836c6bcab7361102aba992d514c0b4bcb7c2cc02ab2261022f1d3aa27be5f348702eb1c877b94cce373eb8016383c827a13769707c629fd97ec33f80e4277483792c412533c546d8a438c547bf270437cc8a99ba145ff039cdf58694ed6a8a572733cf4debad448af93202b315087ae7360761d80ab821156ee0a5b630ad90db17f093c15cc67a0f3c1e94000000"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:23 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) ioctl$sock_netrom_TIOCINQ(r1, 0x541b, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet_sctp_SCTP_RECVRCVINFO(0xffffffffffffffff, 0x84, 0x20, &(0x7f0000000040), &(0x7f0000000080)=0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) socketpair$inet_sctp(0x2, 0x1, 0x84, &(0x7f0000000080)) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r2, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$DRM_IOCTL_AGP_INFO(r1, 0x80386433, &(0x7f0000000280)=""/255) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x400) 2033/05/18 03:35:23 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x0, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x8}}, 0x3ff, 0x28000000000}, &(0x7f0000000080)=0x90) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f00000000c0)={0x81, 0x4, 0x9f3, 0x285f, r2}, &(0x7f0000000280)=0x10) 2033/05/18 03:35:23 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:23 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r2, 0x0, r5) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:23 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:23 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 5: r0 = socket$inet6(0xa, 0x0, 0x0) r1 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r2 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r2, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r1, 0x4c00, r2) sendfile(r1, r2, &(0x7f0000000000), 0x3) getrlimit(0x0, &(0x7f0000000180)) ioctl$LOOP_CLR_FD(r1, 0x4c01) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f0000000280)={0x0, 0xcd, "7fa31adec0a7f413f5618063645cadbfb5384f70f8e4aa1a3536c7a3eb5cbf5fef21ab017035f67e98007fdebe8a072beb41eb14e978bb5d97ee1630707046e8312d7527e27f2a1f768a51c22c552b03cd0ddb36a84f227586650fc5b601eb46d005113d48cba9e0cbc8838d3988be3d8ac13eddbe1be1c35f17f4aa0207cb9be9f33bbbfcc051e2363a13da457b714c4821410bdd6b27cfcf767fcdc4c2c303ec6835570c8983e5c76b9240b34ac8a03bb6dbd367ef4500adefaa4e9836d27d94a752fcf6c5d365c26f0b2dd9"}, &(0x7f0000000080)=0xd5) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f00000000c0)=@assoc_id=r3, &(0x7f0000000100)=0x4) msgget$private(0x0, 0x109) 2033/05/18 03:35:23 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:23 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:23 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000080), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) 2033/05/18 03:35:24 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x0, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r3 = socket(0x0, 0x2, 0x0) r4 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) 2033/05/18 03:35:24 executing program 5: socket$inet6(0xa, 0x0, 0x0) r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x1) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) ioctl$LOOP_CLR_FD(r0, 0x4c01) msgget$private(0x0, 0x109) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f00000005c0)=ANY=[@ANYBLOB="1f0000000000000002004e2200000018000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000300000002004e23ac1414bb00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e220000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002004e2200000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba58af6659fc410206fe6950"], 0x210) getsockopt$inet_dccp_buf(r1, 0x21, 0xc0, &(0x7f0000000280)=""/228, &(0x7f0000000080)=0xe4) 2033/05/18 03:35:24 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) r2 = syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x100) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) pwritev(r2, &(0x7f0000000640)=[{&(0x7f0000000280)="ae239506deba2d78dd395640a744f70025dcac1e6e25e991ee23b84620e7131e660636a50977fd8329aa1b2181a628cbb09986e60a17ec25f019f0b1a764e6eb8142f74e8083f8276d1b13efa9047c41685ea347ac0eb539fc1fa9df7dfee2fb268ca5af03f316e5f3b88704d748e9d2d6f91e54d4606fbe29dea65f049ead303c5352dc71294e99338afc7abb6ff62a91dd70d414f6df336797f01e7509c9b3f4bed633a8ea55d7cf20eef790f73a5d117f770f94ca04d8062b558e1debcea58145", 0xc2}, {&(0x7f0000000180)="29098dd4d622f85a68cc581575a78d036b0e0bc3eb60d5607527e86ab4d53c85bde4c5d68c90bc53b2e8d5d5c606a87281097105143e86537588e75067bc7eae0641c40059db25fa79363c25a13c90d65d16ae50433b3fa1950beed29252d1df52310c91ebaac86b57eb0da232ebac8d85297b903a1b21239d30db4e451e9c422641222737627e70a7b9e597531ed3d815c98e8b40f5c16f821216e7c68d655a7884d10469c383e0ce57da88e51b", 0xae}, {&(0x7f0000000380)="246f6d40e8a856ef8d10702c09b2697e4ca9c15500b6883d3d7fab4bf52233eff2dd19057af33037507694fb7aac1f4aabc8e240b16cbf59444d9df96f34e9a880a7ffcffde7cbfbc9beda352bfd83258c4b21100731d145ed76874768cb911d093734f67de9dd99332f7849ad7b6c6635fc27ae2d9fbd3bd1ba12f8c7dd90c057b0b834551e233d065231abfc78ee3ee575622c973ce27b7931fd9f3fd04a580800263ab6d491fe2d4f6e5714d562a8baf3c955ad419e", 0xb7}, {&(0x7f0000000080)="6de969f432e8684ee33b5daeb3e1d0396f1c0adee5aba787c7f0e3739959c043096384ad69e9810cc06941c10bae936b807b93bae824b19342416cc5973669b47a133bc473acd3806215bf272209a4c7e175408e1bc05d2e22f296eb03c9d895b5db21c58f98749639ceb16ef06730a1236b2d8dec70b472ea058720", 0x7c}, {&(0x7f0000000440)="da3bcdb8fc5a1ef3cb586102de605b4c3c582748c38615e3ed9b978cf28885eba243b390b12e4a525785fc0a4aeead90d5e49aa7c39abaa8024657d06780796498082a5909261e50815c142f8f451ebe33459a6d07b79e1038abad8887544416b33441af422a73878209ea4e6858edcbff6747d67fe5b47f736195d4fd5caf2ff9cb8565e4fea1d8ceb7c5b6b5b683a214c464d89e3e31b7a64d13b9c7ed6a0694b80f44e21187582cb0f9cd0522f9edce492b5acb412c17efc3d1c0c31de70628caa8a61dcf4bbf81c7419285a80438cb75a34ca58e9552fe058cf4016aef8d608fd5", 0xe3}, {&(0x7f0000000540)="2b3ba94686a9b22db20c2767087104213f62d2bfb5b9600614ec600fe986bbbe4b60c4867d0176457ce2fd65ed51b47e89bf796b502a666ba2e43b1a9332af2edfdacc075c09d8759bde7579b3b4df9a6398c99f0046510a0077eacd5590e69ce6cdaa9ae0605d4b5ab0b0b50f9c25d4b64669fc493f55e1fb05770381e294dc3ba14691e0aa7c866e1f3fdf710f76db40ae9814ce2afb559a2a33b876ee8f3f4b77d188ab958c51", 0xa8}, {&(0x7f0000000600)="48622844ce13606b080dcade73e45574be73ced65da07ccff20f5605470fe611a80de6e9bb405bffc63ea1132665410475670047ca999c8b84", 0x39}], 0x7, 0x0) sendfile(r0, r1, &(0x7f0000000000), 0x3) epoll_create(0x1) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) msgget$private(0x0, 0x109) ioctl$sock_inet_udp_SIOCINQ(r1, 0x541b, &(0x7f0000000700)) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f00000006c0)) 2033/05/18 03:35:24 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:24 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x0, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000740)='/dev/vcs#\x00', 0x435, 0x7) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a549c5f60e363477bf023ea9f8c55a6907e665e7ecb03834990b6b4b8a5ea7c20f7886c71b1246be9b25fc58d2b9ef83b77d5e37aa2c4", @ANYBLOB="a4882dbd7000fbdbdf25030000005800010008000400020000000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff028308fc0000000000000000000000000001080004004e240000080004084e2000004c0001000c0007002c00010030000001080004004e210000080001000a000000080004004e2200000800004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000006c0)=0x7, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x3bd) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:24 executing program 6: r0 = syz_open_dev$loop(&(0x7f00000012c0)='/dev/loop#\x00', 0x10000000000, 0x1) r1 = memfd_create(&(0x7f0000000240)='\x00', 0x0) pwritev(r1, &(0x7f0000f50f90)=[{&(0x7f0000000040)="aa", 0x1}], 0x1, 0x81006) fstat(r1, &(0x7f0000000080)) syz_open_dev$loop(&(0x7f0000000140)='/dev/loop#\x00', 0x0, 0x0) ioctl$LOOP_CHANGE_FD(r0, 0x4c00, r1) sendfile(r0, r1, &(0x7f0000000000), 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x2c) ioctl$LOOP_CLR_FD(0xffffffffffffffff, 0x4c01) ioctl$SNDRV_CTL_IOCTL_PCM_INFO(r1, 0xc1205531, &(0x7f0000000280)={0x80000001, 0xfffffffffffffffe, 0x40, 0x80000000, [], [], [], 0x5903, 0xffffffbfffffff01, 0x3, 0x3, "b60b2f8ed5a52afc0d5fd8cff8bffa68"}) msgget$private(0x0, 0x109) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:24 executing program 5: writev(0xffffffffffffffff, &(0x7f0000f9a000)=[{&(0x7f00007a7000)="2900000021001900013d3500000a00060200000000000000000100040d001000000000002400030008", 0x29}], 0x1) 2033/05/18 03:35:24 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r3 = socket(0x0, 0x2, 0x0) r4 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 6: clone(0x6, &(0x7f0000000600), &(0x7f0000476ffc), &(0x7f0000000040), &(0x7f000043dffe)) r0 = signalfd4(0xffffffffffffffff, &(0x7f0000637ff8)={0xeb}, 0x8, 0x0) read(r0, &(0x7f0000000100)=""/128, 0x3f7) open(&(0x7f0000000180)='./file0\x00', 0x202, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080)='/dev/kvm\x00', 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = syz_open_dev$mice(&(0x7f0000000280)='/dev/input/mice\x00', 0x0, 0x0) ioctl$KDADDIO(0xffffffffffffffff, 0x4b34, 0x0) fcntl$getownex(r2, 0x10, &(0x7f00000016c0)={0x0, 0x0}) ioctl$RNDADDTOENTCNT(0xffffffffffffffff, 0x40045201, &(0x7f00000017c0)) getpid() ioctl$TIOCSPGRP(0xffffffffffffffff, 0x5410, &(0x7f0000000340)=r4) perf_event_open(&(0x7f0000740000)={0x2, 0x78, 0x47}, 0x0, 0x0, 0xffffffffffffffff, 0x0) pipe2(&(0x7f0000000100)={0x0, 0x0}, 0x0) clock_gettime(0x0, &(0x7f00000002c0)={0x0, 0x0}) mq_timedsend(r3, &(0x7f0000000740)="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", 0xf79, 0xfffffffffffffffe, &(0x7f0000001740)={r7, r8+10000000}) r9 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) r10 = dup3(r0, r6, 0x0) clock_gettime(0x0, &(0x7f0000000000)) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000decfe0)={0x10005, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_GET_DEVICE_ATTR(r6, 0x4018aee2, &(0x7f00000001c0)={0x0, 0x6, 0x9, &(0x7f0000000040)}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000200)=0xfffffffffffffffe) ioctl$KVM_RUN(r9, 0xae80, 0x0) ioctl$KVM_SET_VCPU_EVENTS(r6, 0x4040aea0, &(0x7f0000460fe4)={0x0, 0x7, 0x2, 0x0, 0x4, 0x8, 0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x805, 0x4b, 0x0, 0x1}) syz_kvm_setup_cpu$x86(r5, r10, &(0x7f0000753000/0x18000)=nil, &(0x7f0000000140)=[@text32={0x20, &(0x7f00000000c0)="0fc7280f080f20030f01727166ba4200b834000000ef66bad10466edb81da1fb500f23d00f21f835300000050f23f8c4c3194bfc360f20030fc76d08", 0x3c}], 0x1, 0x0, &(0x7f0000000180)=[@dstype3={0x7, 0x9}], 0x1) ioctl$KVM_RUN(r6, 0xae80, 0x0) 2033/05/18 03:35:24 executing program 5: r0 = openat$vnet(0xffffffffffffff9c, &(0x7f00002ac000)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r0, 0x40000000af01, &(0x7f0000c97ff8)) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x0, 0x0) close(r1) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000ee1000)) socket$inet(0x2, 0x3, 0x3) ioctl$KDGETKEYCODE(r1, 0x4b4c, &(0x7f0000000000)={0x1, 0x5dc82579}) ioctl$VHOST_NET_SET_BACKEND(r0, 0x4008af30, &(0x7f0000d7c000)={0x0, r1}) 2033/05/18 03:35:24 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r3 = socket(0x0, 0x2, 0x0) r4 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r5, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r5, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r4, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r4, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) 2033/05/18 03:35:24 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0x1f004, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r7, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0xffffffffffffff67, 0x80003) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYRES64=r5, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913922a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860e01000000000000000ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c722ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0x2) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={0x0, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r9 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000500)={r10, 0x6}, 0x8) 2033/05/18 03:35:24 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 6: r0 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={"d202b999cf85000000000088f301e710", 0x102}) r1 = syz_open_dev$tun(&(0x7f0000000280)='/dev/net/tun\x00', 0x0, 0x0) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000180)={0x1, &(0x7f0000000140)=[{0x6}]}) pipe2(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) name_to_handle_at(r2, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x34, 0x9, "e5b4e382cf29f07c7f520c04ddafd7c6af4e1bfee6b6c4e76826c7a8b1b8dd1dfe5ccb00aa3e2b464dc36a5b"}, &(0x7f0000000100), 0x400) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'vlan0\x00', 0x102}) 2033/05/18 03:35:24 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:24 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x10000, 0x0) setsockopt$RDS_GET_MR_FOR_DEST(r1, 0x114, 0x7, &(0x7f00000001c0)={@rc={0x1f, {0x8a, 0xd09, 0x40, 0x5e2, 0x1ff, 0xfffffffffffffffe}, 0x8}, {&(0x7f0000000280)=""/236, 0xec}, &(0x7f0000000180), 0x8}, 0xa0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), 0x4) 2033/05/18 03:35:24 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x0, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:24 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:24 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100"}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 3 (fault-call:1 fault-nth:0): r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:25 executing program 5: mkdir(&(0x7f000082f000)='./control\x00', 0x0) r0 = syz_open_dev$adsp(&(0x7f0000000400)='/dev/adsp#\x00', 0x4, 0x88106) ioctl$PPPIOCSFLAGS(r0, 0x40047459, &(0x7f0000000380)) r1 = userfaultfd(0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000300)) r2 = syz_open_dev$loop(&(0x7f0000000040)='/dev/loop#\x00', 0x0, 0x200000000044042) sendfile(r2, r2, &(0x7f0000000340), 0x10000) r3 = syz_open_dev$vcsa(&(0x7f0000000180)='/dev/vcsa#\x00', 0x7, 0x80000) ioctl$VHOST_SET_LOG_BASE(0xffffffffffffffff, 0x4008af04, &(0x7f0000000240)=&(0x7f0000000200)) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x0, 0x4) write(r0, &(0x7f0000000280)="cbd10de974baba7f609018cc28e4", 0xe) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000140)={0x2122, 0x0, 0x2, 0x6}, &(0x7f00000001c0)=0x10) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000480)='/dev/ptmx\x00', 0xfffffffffffffffd, 0x0) listen$netrom(0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f00000abfc0)={0x3ffffd}, &(0x7f0000768000), &(0x7f00007fbfc0), &(0x7f0000f22000)={0x0, 0x989680}, &(0x7f0000f14000)={&(0x7f0000553ff8), 0x8}) rt_sigprocmask(0x0, &(0x7f00000002c0)={0x8}, &(0x7f00000003c0), 0x8) write$sndseq(r0, &(0x7f0000011fd2)=[{0x0, 0x0, 0x1, 0x0, @time, {0x3}, {}, @time=@time={0x77359400}}], 0x30) mount(&(0x7f00000000c0)='./control\x00', &(0x7f0000000080)='./control\x00', &(0x7f0000000100)='xfs\x00', 0x0, &(0x7f00000001c0)) rt_sigprocmask(0x1, &(0x7f0000000580), &(0x7f00000005c0), 0x8) rmdir(&(0x7f000015dff6)='./control\x00') faccessat(r0, &(0x7f0000000000)='./control\x00', 0x78, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000440)='/dev/audio\x00', 0xa100, 0x0) sched_getattr(0x0, &(0x7f0000000540), 0x30, 0x0) close(r1) [ 181.372985] FAULT_INJECTION: forcing a failure. [ 181.372985] name failslab, interval 1, probability 0, space 0, times 0 [ 181.384313] CPU: 1 PID: 26456 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #6 [ 181.384321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 181.384325] Call Trace: [ 181.384343] dump_stack+0x194/0x24d [ 181.384363] ? arch_local_irq_restore+0x53/0x53 [ 181.384373] ? __save_stack_trace+0x7e/0xd0 [ 181.384402] should_fail+0x8c0/0xa40 [ 181.384422] ? fault_create_debugfs_attr+0x1f0/0x1f0 [ 181.384441] ? trace_hardirqs_off+0x10/0x10 [ 181.384452] ? print_irqtrace_events+0x270/0x270 [ 181.384480] ? find_held_lock+0x35/0x1d0 [ 181.384523] ? check_same_owner+0x320/0x320 [ 181.384538] ? rcu_note_context_switch+0x710/0x710 [ 181.384563] should_failslab+0xec/0x120 [ 181.384576] kmem_cache_alloc_node+0x56/0x760 [ 181.384589] ? __lock_acquire+0x664/0x3e00 [ 181.384598] ? page_add_file_rmap+0x670/0xc50 [ 181.384618] __alloc_skb+0xf1/0x780 [ 181.384644] ? skb_copy_and_csum_dev+0x370/0x370 [ 181.384658] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 181.384669] ? print_irqtrace_events+0x270/0x270 [ 181.384694] ? print_irqtrace_events+0x270/0x270 [ 181.384704] ? alloc_set_pte+0xefd/0x1590 [ 181.384718] ? print_irqtrace_events+0x270/0x270 [ 181.384731] ? trace_hardirqs_off+0x10/0x10 [ 181.384737] ? lock_release+0xa40/0xa40 [ 181.384754] alloc_skb_with_frags+0x10d/0x750 [ 181.384764] ? reacquire_held_locks+0x1f9/0x3e0 [ 181.384780] ? __lock_acquire+0x664/0x3e00 [ 181.384790] ? skb_complete_wifi_ack+0x1b0/0x1b0 [ 181.384801] ? __lock_acquire+0x664/0x3e00 [ 181.384821] sock_alloc_send_pskb+0x787/0x9b0 [ 181.384852] ? sock_wmalloc+0x1d0/0x1d0 [ 181.384873] ? dev_get_by_index+0xbf/0x170 [ 181.384884] ? lock_downgrade+0x980/0x980 [ 181.384901] ? __dev_get_by_index+0x1a0/0x1a0 [ 181.384914] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 181.384932] ? __lock_acquire+0x664/0x3e00 [ 181.384957] packet_sendmsg+0x1ece/0x60b0 [ 181.384971] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 181.384979] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 181.384998] ? find_held_lock+0x35/0x1d0 [ 181.385041] ? packet_cached_dev_get+0x2b0/0x2b0 [ 181.385053] ? __lock_is_held+0xb6/0x140 [ 181.385086] ? trace_hardirqs_off+0x10/0x10 [ 181.385106] ? iterate_fd+0x3f0/0x3f0 [ 181.385120] ? _parse_integer+0x140/0x140 [ 181.385136] ? find_held_lock+0x35/0x1d0 [ 181.385157] ? __might_fault+0x110/0x1d0 [ 181.385167] ? lock_downgrade+0x980/0x980 [ 181.609069] ? lock_release+0xa40/0xa40 [ 181.613025] ? check_same_owner+0x320/0x320 [ 181.617321] ? __check_object_size+0x8b/0x530 [ 181.621794] ? find_held_lock+0x35/0x1d0 [ 181.625836] ? __might_sleep+0x95/0x190 [ 181.629798] ? security_socket_sendmsg+0x89/0xb0 [ 181.634533] ? packet_cached_dev_get+0x2b0/0x2b0 [ 181.639269] sock_sendmsg+0xca/0x110 [ 181.642965] SYSC_sendto+0x361/0x5c0 [ 181.646661] ? SYSC_connect+0x4a0/0x4a0 [ 181.650614] ? __mutex_unlock_slowpath+0xe9/0xac0 [ 181.655435] ? vfs_write+0x374/0x510 [ 181.659125] ? wait_for_completion+0x770/0x770 [ 181.663692] ? __lock_is_held+0xb6/0x140 [ 181.667753] ? fput+0xd2/0x140 [ 181.670923] ? SyS_write+0x184/0x220 [ 181.674620] ? SyS_read+0x220/0x220 [ 181.678230] SyS_sendto+0x40/0x50 [ 181.681660] ? SyS_getpeername+0x30/0x30 [ 181.685704] do_syscall_64+0x281/0x940 [ 181.689567] ? __do_page_fault+0xc90/0xc90 [ 181.693780] ? finish_task_switch+0x1c1/0x7e0 [ 181.698252] ? syscall_return_slowpath+0x550/0x550 [ 181.703158] ? syscall_return_slowpath+0x2ac/0x550 [ 181.708067] ? prepare_exit_to_usermode+0x350/0x350 [ 181.713060] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 181.718402] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 181.723226] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 181.728390] RIP: 0033:0x4548b9 [ 181.731555] RSP: 002b:00007ff614e1ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 181.739237] RAX: ffffffffffffffda RBX: 00007ff614e1b6d4 RCX: 00000000004548b9 [ 181.746480] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000013 [ 181.753725] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 181.760968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000014 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:25 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 181.768212] R13: 00000000000004f3 R14: 00000000006f9768 R15: 0000000000000000 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:25 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000940)='/dev/hwrng\x00', 0x240000, 0x0) ioctl$SIOCGIFMTU(r2, 0x8921, &(0x7f0000000740)) r3 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000140)={0x28, 0x0, 0x2711, @hyper}, 0xc) r5 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r3, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r6 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r5, 0x4c82) r7 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r8 = fcntl$dupfd(r1, 0x0, r5) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r4, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2416d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fd0046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e2100a9000000000000006649760cbc7ebe5100080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000000000000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) r9 = perf_event_open(&(0x7f0000348f88)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) add_key(&(0x7f0000000200)='encrypted\x00', &(0x7f0000000280)={0x73, 0x79, 0x7a, 0x3}, &(0x7f0000000300)="2ba70408593d637f461cf4419edf7a5bb1bfd82cdfa71857c946f828d292f002aad1f28b329e5822fe7847aa55ab3fef067da3b7b45954b2faa018a1eae1c589c6217d44d0715ec0cba1d814419c338b88f94ff937afda774ba03e4b5fd74027e5ee5ce3a8e85a", 0x67, 0xfffffffffffffffd) getsockopt$netlink(r7, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r8, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000c8df6238624f899a09088870f4464e791dc0299b4f241892560cca6dd0c97d0f59dd62505a24827f7f041b17b6854dd0e25bbf6a0a3ace95cd05ad22af95f21136341bd76b1b3d2b01f9497390a3c98580ce51ef0bee45ffc68f93527842a600fdfa77e2f4110e017ad87475b90e1127be18a9168ace29f38aca5ead178d40fc7bbc253bd22e7f989257e11987a243a478621f000628bcabc4c9ab321ede13d087c9fd5c322fa66006a7f65e767bfd26f61529f3425b68356e01393f186bf4a1cf7347390b7852827ea8cf1a5d51a179c3ce73eb86ff83bf1277c5e9a11a8096212279758545d8127b80328e18d90dc580714e147d5607c4822fcf4d94c08ee2335d4bdd96876beb8fb05be7bcaafb5500000000000000000000003084c5212362b7527db2b3bba0715541ca7b229d3fd702a402cb3e2427fd3f8452f3567f5ffbf5ccf5418731ea425b6d08c80276bf1246720729516c4ecafc3533a347dc536cacf7bfaf845f9aaa4cf6ff76bf391b64cbadf5b542cc3f7f25ee32db2cc2b919b8c180abaee318bf836c6bcab7361102aba992d514c0b4bcb7c2cc02ab2261022f1d3aa27be5f348702eb1c877b94cce373eb8016383c827a13769707c629fd97ec33f80e4277483792c412533c546d8a438c547bf270437cc8a99ba145ff039cdf58694ed6a8a572733cf4debad448af93202b315087ae7360761d80ab821156ee0a5b630ad90db17f093c15cc67a0f3c1e94000000"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30fa287671833119b1997f4859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48afd6ef062ad5b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5f46f9ed842b7c495f79a7caf0c66c3609ce6dc15a44192d632c0ab4ee99597f555e1c7573c04a8a0b4c0eb56078fd7ad5e34043d1776ab"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r7, 0x84, 0x75, &(0x7f00000007c0)={r10, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) dup2(r6, r9) getsockopt$IP_VS_SO_GET_VERSION(r5, 0x0, 0x480, &(0x7f0000000100), &(0x7f0000000380)=0x40) 2033/05/18 03:35:25 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 5: r0 = syz_open_dev$sndmidi(&(0x7f0000000000)='/dev/snd/midiC#D#\x00', 0x3, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) r1 = syz_open_dev$sndpcmc(&(0x7f0000001fee)='/dev/snd/pcmC#D#c\x00', 0x0, 0x0) ioctl$PIO_CMAP(r1, 0x4b71, &(0x7f0000000040)={0x20, 0x0, 0x3, 0x4, 0x1f, 0x8}) 2033/05/18 03:35:25 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:25 executing program 6: mount(&(0x7f0000000200)='./file1\x00', &(0x7f0000001600)='./file0/file0\x00', &(0x7f0000001b80)='ncpfs\x00', 0x20, &(0x7f0000001980)="83757e53a6d6d6368c682ac46a09c9de0a052142635281ed8f2a3fbb23c05f8393aef0e5bc63879d2bbd03d5d51c5f84b9e6ee717caf1fb4da1695ca3737dea218a6b040e2180917eb49743683eac166f1da995b451540147ec2552ca61b0e43349886c268547d1b0d18d880b29e7af2e6bea5dc7c51cf9fccbf7d34b01507fdbcc31939d50cac5b789113ac7f09d54dddff1efb2b6460d7a3783e3746223e6c1662ecc4b7bf9a7862d502daf885f5be26eaeb01e238e480d37537729d243eef31066462e27561eef956a839b999f6a58e5a783dc758bd7c01e1edb257043b9bad36a477dc69be7a1628e6a31819b6851ee8483965fbbc93dc36ecc6716c944cf850f9244616a985c57acc3e1712271fa3aa7b4216cfa26e2ad0f587f07d6965d90f9cc282de293c77b07a1a649f7350fbabeee8b6c9c5629156e9f0b125a6a75040beb3951cda5d6064d3c262c20890bcb77bc7ef4a638273f1751db4e0666c309c0d5ce2c9b621616d7f910de416d870651c9f3de3ddc4b8e440765e23f4353202435d9d0a3c2c73e63a3eebdc3be2145ce7cf2b2708f72d222779e7a5a6be8c370816ac898379cbaf1f58d166e4c8d651456c227c5fdf751941252dba50398bc45a9d9b8b02040c18c8214c4e0ad65d21ddde097beb1766ad42f078c2134060bba19648") mkdir(&(0x7f00000001c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./file0\x00', 0x8) mount(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000100)='./file0/file0\x00', &(0x7f00000015c0)='afs\x00', 0x0, &(0x7f0000000180)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) perf_event_open(&(0x7f0000c72000)={0x1, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) recvmsg(r0, &(0x7f0000005180)={&(0x7f0000004ac0)=@can, 0x10, &(0x7f0000000440), 0x0, &(0x7f0000005100)=""/93, 0x5d}, 0x0) sendmsg(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="e9", 0x1}], 0x1, &(0x7f0000000180)}, 0x0) mkdir(&(0x7f0000fd5ff8)='./file0\x00', 0x0) r2 = openat$vcs(0xffffffffffffff9c, &(0x7f0000001380)='/dev/vcs\x00', 0x40, 0x0) name_to_handle_at(r2, &(0x7f00000013c0)='./file0\x00', &(0x7f0000001640)={0xbc, 0x1ff, "a41077390851ae8d5b47833f73f780c13ad3ca89b3d53b3133800c4060ce129ede34e9721547cebef1a218a59dd0b888b0cbf3d1a546da9d2f9bfe40a0c70799a8788c964e609da8e244a7d8d741277ddb4c201dceda6b9f48456a21803380624333cddaf7de417befe307066511b86512e23c5de9734979d0e8e6cc19010ec22f579e7ad401c845f88b059feb8562fb2a3115c3b11beb1686f3e3f88f6005147b79d39bc15e6ba32ab88d7c324ae86a966a42f5"}, &(0x7f0000001400), 0x1000) recvmsg(r2, &(0x7f0000001440)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000000380)=""/4096, 0xfffffeb9}, {&(0x7f0000001880)=""/229, 0xe5}, {&(0x7f0000000180)=""/15, 0xf}, {&(0x7f0000001480)=""/99, 0xfffffffffffffd50}, {&(0x7f0000001500)=""/133, 0x85}], 0x5, &(0x7f0000001780)=""/208, 0x50, 0x3ff}, 0x10000) mount(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000080)='./file0\x00', &(0x7f0000000000)='9p\x00', 0x0, &(0x7f0000000100)) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f0000000100)='9p\x00', 0x0, 0x0) 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) r1 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f00000014c0)='/dev/vga_arbiter\x00', 0x0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001580)=@nat={'nat\x00', 0x1b, 0x5, 0x570, 0x2a0, 0x390, 0xffffffff, 0x0, 0x0, 0x4a0, 0x4a0, 0xffffffff, 0x4a0, 0x4a0, 0x5, &(0x7f0000001500), {[{{@ipv6={@remote={0xfe, 0x80, [], 0xbb}, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, [0x0, 0xff000000, 0xffffffff, 0xffffffff], [0xff, 0xffffffff, 0x0, 0xff], 'bcsh0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x3b, 0x194d355f, 0x6, 0x1}, 0x0, 0x138, 0x168, 0x0, {}, [@common=@dst={0x48, 'dst\x00', 0x0, {0x0, 0x1, 0x1, [0x9, 0x100, 0x5, 0x3, 0x8001, 0xffffffffffffffef, 0x90000000, 0x7f69, 0xfffffffffffffc00, 0x33, 0x7, 0xa85, 0x200, 0x1, 0x3, 0xd2a], 0xb}}, @common=@eui64={0x28, 'eui64\x00'}]}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x80000000, 0xb2e2, 0x6, 0x3}}}, {{@uncond, 0x0, 0xf0, 0x138, 0x0, {}, [@common=@eui64={0x28, 'eui64\x00'}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv4=@multicast1=0xe0000001, @ipv4=@broadcast=0xffffffff, @gre_key=0x5, @port=0x4e24}}}, {{@ipv6={@mcast2={0xff, 0x2, [], 0x1}, @mcast1={0xff, 0x1, [], 0x1}, [0xffffff00, 0xffffffff, 0xffffffff, 0xff], [0xff000000, 0xffffffff, 0xff0000ff, 0xffffffff], 'syz_tun\x00', 'ip_vti0\x00', {}, {0xff}, 0x2b, 0xffffffff, 0x4, 0x5e}, 0x0, 0xc8, 0xf0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x4, 0xc745, 0x1}}}, {{@ipv6={@mcast1={0xff, 0x1, [], 0x1}, @dev={0xfe, 0x80, [], 0x15}, [0xffffffff, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff000000, 0xffffffff, 0xffffffff], 'gre0\x00', '\x00', {0xff}, {}, 0x2, 0x3, 0x0, 0x11}, 0x0, 0xc8, 0x110}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv4=@multicast2=0xe0000002, @ipv4=@rand_addr=0x1ff, @port=0x4e22, @icmp_id=0x67}}}], {{[], 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x0, 0xfffffffffffffffe}}}}, 0x5d0) bind$alg(r0, &(0x7f0000e15000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) r2 = accept4$alg(r0, 0x0, 0x0, 0x80000) fcntl$setstatus(r2, 0x4, 0x2400) sendto(r2, &(0x7f00005c8f58), 0xfffffffffffffeee, 0x0, &(0x7f0000351ff0)=@ipx={0x4, 0x0, 0x0, "a074edebb7e1"}, 0x10) mmap(&(0x7f0000431000/0x400000)=nil, 0x400000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r3 = dup(r2) ioctl$KVM_SET_LAPIC(r3, 0x4400ae8f, &(0x7f0000001040)={"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"}) bind$alg(r3, &(0x7f0000001440)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(generic-gcm-aesni)\x00'}, 0x58) r4 = add_key(&(0x7f0000001b80)='rxrpc_s\x00', &(0x7f0000001bc0)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000001c00)="5f8ee6ec0931", 0x6, 0xfffffffffffffffa) ioctl$SNDRV_SEQ_IOCTL_QUERY_NEXT_CLIENT(r3, 0xc0bc5351, &(0x7f0000001d40)={0x2, 0x2, 'client0\x00', 0xffffffff80000005, "9ea8474ab7216131", "87524e1526b430d667a4f2dea7a77a7950060a1455366fa7f59900b7d8b651ed", 0x80, 0x8}) r5 = request_key(&(0x7f0000001c40)='asymmetric\x00', &(0x7f0000001c80)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000001cc0)='pcrypt(generic-gcm-aesni)\x00', 0xfffffffffffffffe) keyctl$link(0x8, r4, r5) readv(r2, &(0x7f0000000000)=[{&(0x7f0000000040)=""/4096, 0xfea7}], 0x1) sendfile(r2, r0, &(0x7f0000001d00), 0xae53) 2033/05/18 03:35:25 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x0) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 182.047194] 9pnet_virtio: no channels available for device ./file0/file0 [ 182.069059] encrypted_key: insufficient parameters specified [ 182.073630] 9pnet_virtio: no channels available for device ./file0 [ 182.089228] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:35:25 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 6: r0 = openat$vsock(0xffffffffffffff9c, &(0x7f00001b3000)='/dev/vhost-vsock\x00', 0x2, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0xaf01, &(0x7f0000307000)=&(0x7f0000000080)) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000)='/dev/sequencer\x00', 0x80, 0x0) accept4$inet(r1, 0x0, &(0x7f0000000040), 0x80000) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4008af24, &(0x7f00003b6000)={0x0, 0x0, &(0x7f000005e000)=""/9, &(0x7f0000fb0f80)=""/128, &(0x7f0000f8b000)=""/4}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'ip6gre0\x00', 0x0}) setsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000100)={@mcast2={0xff, 0x2, [], 0x1}, r2}, 0x14) [ 182.145804] encrypted_key: insufficient parameters specified [ 182.146964] 9pnet_virtio: no channels available for device ./file0/file0 2033/05/18 03:35:25 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(0xffffffffffffffff, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:25 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 5: setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000001000)={0x10000, 0x4, 0x100, 0x400}, 0x10) r0 = socket(0x11, 0x4000000000080003, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r0, 0x0, 0x42, &(0x7f0000000080)={"49444c4554570685520e000000000005000000002100"}, &(0x7f00000000c0)=0x1e) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000100)={0x0, 0xd1, 0x1, [0xfffffffffffffc29]}, &(0x7f0000000140)=0xa) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000180)=@assoc_id=r1, &(0x7f00000001c0)=0x4) setsockopt(r0, 0x107, 0xd, &(0x7f0000001000), 0x47e) poll(&(0x7f0000000040)=[{r0}], 0x1, 0x0) setsockopt$inet6_dccp_int(r0, 0x21, 0xf, &(0x7f0000000000)=0x5, 0x4) [ 182.281607] IPVS: ftp: loaded support on port[0] = 21 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f75071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x800, 0x7, 0xa000}, 0x4) read(r0, &(0x7f0000000040)=""/218, 0xda) 2033/05/18 03:35:26 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678ba80"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 6: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in={0x2, 0x0, @rand_addr=0x17946bc4}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)={0x1, [0x0]}, &(0x7f000095dffc)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000eb3ff8)={r1}, &(0x7f0000940000)=0x8) getsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xb) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="94c0ee53b1c5ae43e6616ce5d7eac258", 0x10, 0x0, &(0x7f0000000100)={0xa, 0x4e20, 0x7, @remote={0xfe, 0x80, [], 0xbb}}, 0x1c) getsockopt$SO_COOKIE(r0, 0x1, 0x39, &(0x7f0000000040), &(0x7f0000000080)=0x8) 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 6: r0 = syz_open_dev$sndpcmc(&(0x7f0000000040)='/dev/snd/pcmC#D#c\x00', 0x4, 0x800) dup(r0) r1 = memfd_create(&(0x7f000000e000)='\x00 ', 0x0) r2 = syz_open_dev$sndseq(&(0x7f0000057ff3)='/dev/snd/seq\x00', 0x0, 0x101802) r3 = dup2(r2, r1) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r3, 0xc08c5332, &(0x7f0000000180)={0x0, 0x0, 0x0, "9ede7a8c5ae95ec8672c93340f643a664f13eeab65c0322901dc6bd36cde2c51f01b7f0b014f9f91eeb7c37c7240f476c8d753d000aa8faf8fb574dbcfa6dc4d"}) write$sndseq(r3, &(0x7f0000053000)=[{0x0, 0x1, 0x0, 0x0, @tick=0x3, {}, {}, @ext={0x0, &(0x7f0000055ffe)}}], 0xfffffd56) fanotify_mark(r3, 0x80, 0x10000, r3, &(0x7f0000000000)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue0\x00'}) 2033/05/18 03:35:26 executing program 5: r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x80, 0x5) statx(r0, &(0x7f0000000140)='./file0\x00', 0x5500, 0x0, &(0x7f00000003c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000028000006a0a00fffffff60061187a"], &(0x7f0000000000)="47504c00bc3047eb525f484f89fc96dd6ca64da40ff023122e66f6", 0x0, 0xce, &(0x7f0000000180)=""/206}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x7, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800530da4620000000000000000345be2c21e09d0f1000000c82e00000800009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x80000001, 0x228, &(0x7f0000000300)=""/187}, 0x48) socketpair$inet(0x2, 0x0, 0x6, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x71, &(0x7f00000004c0)={0x0, 0x8000}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000540)={0x7ff, 0x4, 0xfe, 0xf56, r2}, &(0x7f0000000580)=0x10) 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0x0, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678ba80"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x5, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/autofs\x00', 0x100, 0x0) sendto$ax25(r1, &(0x7f00000003c0)="6b25492188b5ef9c7da2e35f333a1c02aa3ddcef1402d8b90251ecd17171589922b5e52a42f54f2c33bfafb5a27be92744ffe582b3172a4382d085c8bac2daeabd25f2a338aed4aa390efcb5903be815ae66582b48b4979616c70cc20051f59a86fd06281468e27d34f89d2e343a2b15a91d3f3ed418119188d66bfcc025abfb87ca01a8d5aebe0a84e9a5894a31b06ac91af8c2e8166be8ef0589337f5be09355ad300ac13ce04c085db9b1e8b74e67d722", 0xb2, 0x4000800, &(0x7f0000000480)={0x3, {"aa661a33306fc2"}, 0xffffffffffffffe1}, 0x10) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000080)={0x3f, {{0xa, 0x4e20, 0x3, @local={0xfe, 0x80, [], 0xaa}, 0x5}}, 0x1, 0x5, [{{0xa, 0x4e21, 0x4, @remote={0xfe, 0x80, [], 0xbb}, 0xffffffffffff086a}}, {{0xa, 0x4e20, 0x6, @mcast1={0xff, 0x1, [], 0x1}, 0x7}}, {{0xa, 0x4e21, 0x8, @loopback={0x0, 0x1}, 0x4b}}, {{0xa, 0x4e24, 0x5, @dev={0xfe, 0x80, [], 0x10}, 0x81}}, {{0xa, 0x4e22, 0x4, @mcast2={0xff, 0x2, [], 0x1}, 0x3}}]}, 0x310) 2033/05/18 03:35:26 executing program 5: socketpair(0x1, 0x1, 0x0, &(0x7f000000dff8)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$EBT_SO_GET_ENTRIES(r0, 0x0, 0x81, &(0x7f0000000080)={'nat\x00', 0x0, 0x3, 0x20, [], 0x1013, &(0x7f0000000140)=[{}, {}], &(0x7f0000000180)=""/32}, &(0x7f0000000100)=0x78) recvmsg(r0, &(0x7f0000c41000)={0x0, 0x0, &(0x7f0000153000), 0x0, &(0x7f0000231f05)=""/251, 0xfb}, 0x0) close(r0) sendmsg$kcm(r1, &(0x7f0000948000)={0x0, 0x0, &(0x7f00005dc000)=[{&(0x7f0000d43000), 0x1000002bb}], 0x1, &(0x7f0000d43000)}, 0x0) 2033/05/18 03:35:26 executing program 6: r0 = perf_event_open(&(0x7f0000c72000)={0x1, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3fe}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f0000940000)={0x2, 0x70, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x34}, 0x0, 0xfffffffffffffffe, 0xffffffffffffffff, 0x0) dup3(r1, r0, 0x0) r2 = open(&(0x7f000000fffa)='./bus\x00', 0x141042, 0x0) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') perf_event_open(&(0x7f000000a000)={0x6, 0xfffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_config_ext={0xffffffff}, 0x200000400, 0x3}, 0x0, 0x0, 0xffffffffffffffff, 0x0) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x0, 0xffffffffffffffff) mount(&(0x7f0000144000)='./file0\x00', &(0x7f0000000040)='./file0\x00', &(0x7f00007fc000)='nfs\x00', 0x0, &(0x7f000000a000)) sendmsg$IPVS_CMD_DEL_SERVICE(r2, &(0x7f0000000140)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x38, r3, 0x4, 0x70bd2a, 0x25dfdbff, {0x3}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x7}, @IPVS_CMD_ATTR_DEST={0x1c, 0x2, [@IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x3}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x3}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xfffffffffffffff7}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x24000040}, 0x800) socket$kcm(0x29, 0x7, 0x0) fallocate(r2, 0x0, 0x0, 0x4) r4 = open(&(0x7f0000002000)='./bus\x00', 0x0, 0x0) preadv(r4, &(0x7f0000000000)=[{&(0x7f0000001140)=""/95, 0x5f}], 0x1, 0x0) lseek(r4, 0x0, 0x3) 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000bc0)=[{&(0x7f0000000f40)=""/209, 0xd1}, {&(0x7f0000000d40)=""/248, 0xf8}, {&(0x7f0000001040)=""/214, 0xd6}, {&(0x7f0000000940)=""/41, 0x63}, {&(0x7f0000000c40)=""/154, 0x9a}, {&(0x7f0000000a40)=""/220, 0x68f801797422298e}], 0x6, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r4 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) r5 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r4, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r6 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(r5, 0xfffffffffffffffe) r7 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r7, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r6, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r7, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r7, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e61740000000000000000000000000000000000000000001b00000005000000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000380)='/dev/loop-control\x00', 0x28c0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) openat$dsp(0xffffffffffffff9c, &(0x7f0000000080)='/dev/dsp\x00', 0x101000, 0x0) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000100)={r0}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={@dev={0xfe, 0x80, [], 0x18}, 0x56, r2}) fcntl$getownex(r1, 0x10, &(0x7f0000001600)={0x0, 0x0}) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000001640)={{{@in6, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@local}}, &(0x7f0000001740)=0xe8) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000001780)={0x0, 0x0, 0x0}, &(0x7f00000017c0)=0xc) fcntl$getownex(r1, 0x10, &(0x7f0000001800)={0x0, 0x0}) r7 = getuid() r8 = getegid() ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000001840)=0x0) r10 = getuid() stat(&(0x7f0000001880)='./file0\x00', &(0x7f00000018c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000001c00)=0x0) getresuid(&(0x7f0000001c40), &(0x7f0000001c80), &(0x7f0000001cc0)=0x0) stat(&(0x7f0000001d00)='./file0\x00', &(0x7f0000001d40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TIOCGPGRP(0xffffffffffffff9c, 0x540f, &(0x7f0000001dc0)=0x0) lstat(&(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000001ec0)='./file0\x00', &(0x7f0000001f00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r18 = getpid() getsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000001f80)={{{@in6=@remote, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in6=@dev}}, &(0x7f0000002080)=0xe8) getgroups(0x8, &(0x7f00000020c0)=[0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0]) r21 = getpgrp(0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000002100)={{{@in6=@mcast1, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@loopback}, 0x0, @in=@multicast1}}, &(0x7f0000002200)=0xe8) getresgid(&(0x7f0000002240), &(0x7f0000002280)=0x0, &(0x7f00000022c0)) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000002780)=0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f00000027c0)={{{@in=@dev, @in6=@mcast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@loopback}, 0x0, @in6=@remote}}, &(0x7f00000028c0)=0xe8) getgroups(0x2, &(0x7f0000002900)=[0xffffffffffffffff, 0xffffffffffffffff]) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000002940)=0x0) stat(&(0x7f0000002980)='./file0\x00', &(0x7f00000029c0)={0x0, 0x0, 0x0, 0x0, 0x0}) r29 = getegid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002a40)=0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002a80)={0x0, 0x0}, &(0x7f0000002ac0)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002b00)={0x0, 0x0, 0x0}, &(0x7f0000002b40)=0xc) ioctl$TIOCGSID(0xffffffffffffff9c, 0x5429, &(0x7f0000002b80)=0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002bc0)={0x0, 0x0}, &(0x7f0000002c00)=0xc) stat(&(0x7f0000002c40)='./file0\x00', &(0x7f0000002c80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000002d00)={0x0}, &(0x7f0000002d40)=0xc) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000002d80)={0x0, 0x0}, &(0x7f0000002dc0)=0xc) getresgid(&(0x7f0000002e00)=0x0, &(0x7f0000002e40), &(0x7f0000002e80)) r39 = getpgid(0x0) lstat(&(0x7f0000002ec0)='./file0\x00', &(0x7f0000002f00)={0x0, 0x0, 0x0, 0x0, 0x0}) stat(&(0x7f0000002f80)='./file0\x00', &(0x7f0000002fc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r42 = fcntl$getown(r0, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f0000003740)={{{@in6=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@remote}, 0x0, @in=@rand_addr}}, &(0x7f0000003840)=0xe8) fstat(r0, &(0x7f0000003880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r45 = getpgrp(0xffffffffffffffff) fstat(r0, &(0x7f0000003e80)={0x0, 0x0, 0x0, 0x0, 0x0}) getgroups(0x5, &(0x7f0000003f00)=[0x0, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff]) r48 = getpgrp(0xffffffffffffffff) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000003f40)={{{@in6=@ipv4, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in=@remote}}, &(0x7f0000004040)=0xe8) getresgid(&(0x7f0000004080)=0x0, &(0x7f00000040c0), &(0x7f0000004100)) r51 = getpid() lstat(&(0x7f0000004140)='./file0\x00', &(0x7f0000004180)={0x0, 0x0, 0x0, 0x0, 0x0}) lstat(&(0x7f0000004200)='./file0\x00', &(0x7f0000004240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(r1, &(0x7f0000004380)=[{&(0x7f0000000200)=@abs={0x1, 0x0, 0x4e20}, 0x6e, &(0x7f0000001580)=[{&(0x7f0000000180)="0ca74ba429724012dab2a911320d1159931fa2713e51552fb22f9473abd0", 0x1e}, {&(0x7f0000000280)="74366bd99589ff6eacc5ee355cf2fe39cad04af01e2c6fff8fc734e59488668e01a74b068e42d1cef7b3e501b94a12e3ef02ba573ba9690b92ef99c6", 0x3c}, {&(0x7f00000002c0)="e94351d3aae703490ca4903f0b8c7290aedff09fd0f02bdfa7c24618a492fbacb6c5a487120e4d5781477b1c71ed8f332c2192e4ad197fd65db2ffdd3ce4a412666cacfa28659728def2e80eb8d13bf8a9a0976eb85e547ce6b5b23a18951643da18612812e9460bac326f0c947de4572bc3e842d319cf", 0x77}, {&(0x7f0000000340)="bce565ae5582ab88c7dc46f28d88a417c419a939dd004c9c96c8efad5c4288fb05f88045c45a6bcd406079ca4e2798a9e1f6e726dda0c4f6d8aa7f2ef38f257f276fc979e7a0e53ca344d1feb2c98eb1bfcc7ad5749c9ece6203e4f51e45bbd220f662b58ab3ffd55e6d05ed4d9b5c095e14929feee7e57437ff7300e5294428fb10ed02113479fac7856aebe29c3b8febbfaa1add4925fdb2fe14ae95a5293bafdc3f13b5c6818d63", 0xa9}, {&(0x7f0000000400)="88e59f9138d20bfaaf3aa9c2b978c5f57dac954b5da95be4feee2287d05a55cc10c2c29d159c8618efcd6c", 0x2b}, {&(0x7f0000000440)="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", 0x1000}, {&(0x7f0000001440)="d8eea62d67f79d4429f0b19cc5ddcce02b34640620319fa85aa26d65c9cf29f32f8b9c9dd113c712451f8614e3fc4921b216ab56e6961b984277fc4512819747e14714bf17a4e72fd6e3577700b1717262df84f48bac", 0x56}, {&(0x7f00000014c0)="5ee5965cb76e23d4e7feff1c5b742919612e17944326f006b9235d547ee453d69c12059cd1ce4a331b40f4b90fa21ae21acb82fb4023273be09d9f8da10c40719ee5d3321520861ec3ea42a768cfcde03691afc1410eea154c643cc5a50a03a0035f87130e8a2a2ac744e2d540258017ab8e5499f7c1a472ab713c787662132cadff56d48f28a0ce80bc80eeb6c3c024a756cfc4eb8d887aefef33d278e94187c1b6c45d81731a9b29a64d8782b986fd90396595c1193ee29e21db7022ace2", 0xbf}], 0x8, &(0x7f0000001940)=[@cred={0x20, 0x1, 0x2, r3, r4, r5}, @rights={0x18, 0x1, 0x1, [r0, r1]}, @cred={0x20, 0x1, 0x2, r6, r7, r8}, @rights={0x38, 0x1, 0x1, [r1, r1, r0, r1, r1, r1, r1, r1, r0, r1]}, @rights={0x20, 0x1, 0x1, [r1, r1, r1]}, @cred={0x20, 0x1, 0x2, r9, r10, r11}], 0xd0, 0x8080}, {&(0x7f0000001a40)=@abs={0x0, 0x0, 0x4e24}, 0x6e, &(0x7f0000001bc0)=[{&(0x7f0000001ac0)="35deaf218186453d0046f2d067a1db9e2c922c0b512535d00a144b93d3ddb8c4d7fa48e14f24761a490ade3aeea9511a44e583b7cf7e71c48d0befacf99ea40c8536614b9e0b502331e944b3612bea16d94b9439e92a07a519da8168a9a3c53503006905673d6552d09044202932e09d428adefa82b7e95a8e6c66f76971e9a6af2f3165b67d3e82f9f30a1fec6160df71708b8809d88df543473231c6cdf1a770602e0cb620565c8bad79c4b35e71c8cd6ec5943e562055b57fd857402ba6e29257639f2bc1503ac06e01f3ea9331d36d201c3f2dc4d3935a69cd6141161036f0701ece27f598040c290d50cfaf3621f72a", 0xf2}], 0x1, &(0x7f0000002300)=[@cred={0x20, 0x1, 0x2, r12, r13, r14}, @cred={0x20, 0x1, 0x2, r15, r16, r17}, @cred={0x20, 0x1, 0x2, r18, r19, r20}, @rights={0x28, 0x1, 0x1, [r1, r1, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r21, r22, r23}, @rights={0x38, 0x1, 0x1, [r0, r1, r0, r1, r0, r1, r0, r0, r1]}], 0xe0, 0x4801}, {&(0x7f0000002400)=@abs={0x0, 0x0, 0x4e23}, 0x6e, &(0x7f0000002740)=[{&(0x7f0000002480)="99feff26d64633a50e253898f71c8aa739a7ecba25d29fd806603356712469e118953944d2e5eb12d1d6857a83f506f7176f734c940f48bca0a53cfde5f2a329fa401d365906dc16845957a62038ae2122ec114e25809b91eadd0f9736dddadadf596f0d04c8b89ee823595d796e5fa600aa4bac789f9b96c4ca91cd34f619d13d2005f1e9ee876b8bce10c781b39c0a5c162dc50bafc214b83f89c138edbeffe6931eab9b71994b55499929de29c733ab0efb8aacf245bb0a9484482ca40d819fb0eeddf8bfc8982de6c6f5df35fc79e93032ee65316166b42ab4aa0a93e562094d8eb56f", 0xe5}, {&(0x7f0000002580)="c4c81b3ea8aa8e853ff717b41ddb2ab938106bc25e6b358a80e9b85909f6a2bd1f74cc367ca68c573b2dcb30c5f3c8eda3053d31efb94e781654b26ba019969a6c46cbf472ac92791e60f1ed797078c77e693576b03cd430c76618625de0c6e3b6ddbde569c2b886fe92c8a15e", 0x6d}, {&(0x7f0000002600)="3dcd86a2287f9cb83cba4a2f3ce1fd5ca292bb4e35ff7c37c5727566eb3c36e7291e843ef4e6b6c996205040236b845d43b5bca932d6ac0fbb3b255aafe75e289bf4e250155b0d60f80e2f527c8d1be4a8aa12ee6809b0ea05e58862103e6d77d9d41559903b3b0403", 0x69}, {&(0x7f0000002680)="973439340cd8602b56423424fc9a3bb628f801c637b8699ca34244c1de7dc713db5d29eca2ee580e273e2b4fc06f9a46c63fae3476c232a7217bf6ab502ea38d8825025611feec70ba8d1649bbecf6bb64842fbab5830fab818164d3069b0605728d9bf2567cae52480a5f814bc78184e1f0dc709bd3d7b16cbd9a9c5e1d2adc145b2e8cf95901dc12236db8c4ca", 0x8e}], 0x4, &(0x7f0000003040)=[@cred={0x20, 0x1, 0x2, r24, r25, r26}, @rights={0x20, 0x1, 0x1, [r0, r0, r1]}, @rights={0x28, 0x1, 0x1, [r1, r0, r0, r0, r0]}, @cred={0x20, 0x1, 0x2, r27, r28, r29}, @cred={0x20, 0x1, 0x2, r30, r31, r32}, @cred={0x20, 0x1, 0x2, r33, r34, r35}, @cred={0x20, 0x1, 0x2, r36, r37, r38}, @cred={0x20, 0x1, 0x2, r39, r40, r41}], 0x108, 0x8001}, {&(0x7f0000003180)=@abs={0x1, 0x0, 0x4e21}, 0x6e, &(0x7f00000036c0)=[{&(0x7f0000003200)="609bf3ef146828229d14419032365845316a6d9e708fa34245b3955c8ca446f8ad3ef09bcd317122f6cbea2c57e2419324148924aef56e143cb528cdd803f84e097b73e762513a9d0379cff6291b36e9a064316bbaf64c0d8427c6f2226d7e5e83f8a1406269d04f4fcc7d1ea1dd722b08c5c276b993efd076cc4a37229ffeaf4931e2be2002d7abfc3a4a2a34a7fc30449a00ec556cd340bafc432845c80a1c855e465d93cf86e678f3320ca478098b4385934d087825ef6c192c5acdbc4d815ac99600a099611df349b93ea3e052f9a3d7710c7c855d22ce1271e6c2", 0xdd}, {&(0x7f0000003300)="cefcf85fc32927b55693f4b49eab09b4a6edea5439b5383f1897926194604d95bbabcb57173242d56200f4980fc2cbd7f11008bd6fe6c0b857c52b9c669389475732a225fab5ba4a8f3800181a8b475aca0859c071ffa1380d29fc3e78c84939bd41765c93832f403595c09619aa489fcb26bae83182feaf57c8df8e2a24b51590eb7c7654d872ba16ea86aa74975efb4882e8492c262d246e6e4b5d6c96465e8177fb85fe9655b94f46d8043499d53c33573c21876644e7f08905e9f5e856c9f62c39a4ba64322995ee4ac0d0e0c1962401e057ed745c20bf9bf536c4", 0xdd}, {&(0x7f0000003400)="b248ab91c08a849d34a70a685acefcdb72c314e2ea1c9f8623250232412a52ab0668bb9b46271625200926d3ecb5929b17806b27b582395465832eefb0ce809b5757e92597c0feac9629f275d302fd39fc4c634362408e4b5095b92e590aeae29a99098c4908c805333d3077b4af3889251461b39729b47011871bdfaa5a977acaa77bffca37d29a71b89360339e6b959df6", 0x92}, {&(0x7f00000034c0)="7e50a77696ed0664d32d79d925006719aafd99ab214d6b0970c0", 0x1a}, {&(0x7f0000003500)="fb47fa591be7e47cb5ffc97fe23719de57a9867383175e97501b3a5978b54fd7d98296011f33f30469f5056fa6dc38912446afca2483d9a0e1eb6a59fb12111e3f6a5a5da45fb0b03fadbcb53de33d5e20191ca221ba5645ab6f8b1913d8a188bebb0e6e08791e736dab74549f7c6dfa8bbcf4f7a10b1f763220604c5d", 0x7d}, {&(0x7f0000003580)="4edb4a03bc889c94e965db0569fc317e9db89ddfb2844852c03bde7760fb54468a269adc7d73a038239c02421fd0a1be4aba5616f94403d9f06943df726cfdea3ddc3d717a98c68e2627024fa15d76f61558220dc076c0516ac7a47bd07e55634b20b792d039806f12b2094af4f494eb015049c14531b0927dd897e19f7395f851ca3608248990bd5202e67808700449a8d42de92053d1a12f0ced00e1996d7e73a95f0246e583b897a5791778d141ff88951bf9f394a363333affb69b885025d85c4a0197fba68289f7a9cbf8831fc826", 0xd1}, {&(0x7f0000003680)="e6d0b27dd26bc629336729d54139a6a20266cf47e77ab41abbe986a91f000a36b6936c9ecfd7c2b48378", 0x2a}], 0x7, &(0x7f0000003900)=[@rights={0x20, 0x1, 0x1, [r1, r1, r1, r1]}, @rights={0x38, 0x1, 0x1, [r1, r0, r0, r0, r0, r0, r0, r1, r1]}, @cred={0x20, 0x1, 0x2, r42, r43, r44}, @rights={0x18, 0x1, 0x1, [r0]}], 0x90, 0x4004000}, {&(0x7f00000039c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000003e00)=[{&(0x7f0000003a40)="b015b6edf5942c9efef0bba20adc2990372c053ba57f1ef7f2cde84eb48d2485c0fce21391c53ba95e7892ebd4c2522d5196f18f325e2cb7a88e6ebd36e180490841b2", 0x43}, {&(0x7f0000003ac0)="ccab3b30e7481b245fcd7db71d2a4f38da4a173cd69d7f823577433c19f92141648ac9022a4ad9", 0x27}, {&(0x7f0000003b00)="ab949552a3d663b33cb9e59dc46da98302b796f9876b8fa9159e43b398e22d16857d2ddf3895ef73349fd581f982a037d6c75fa338cdc7232a55c2ca76efdead1d9957a731f2d115205c54630c049f652708279d0e6a3b0963a9783b132ede5b9ff1f53e", 0x64}, {&(0x7f0000003b80)="0bf0e686c699a5b4e2403416266aab183efb0a195ac708ed02c6da0c355abc1d76b8d3976e0e843baa5562543698528935b7d26dd58dcaab7576ce0a9670509465569080e58917557f884fcac95bc9087ec44fc0b53d883f64add1285fb06526f2043238949b55d05c4e5b19bb78bef3ded4bba3aebee691cbf758419a72085733f74a009f7c0800adf5984dedcad0339a2ccfdf033d27e641c86728d6b9f29103e0d81fc154f580e2e8ed3c52e7548a4e6b2440028d72f257cad7d359c505756b7143831cb65cf8e574fb0935c585b2ac6744759e5e16157b94cc792a92dd388463ac", 0xe3}, {&(0x7f0000003c80)="9a27c1f075a9c41be09fdbbec99940257a1237eb7017a4da9263389ea23338eab2e2b630442ae7d870f26a9ef47790a6c7a3dc6b76acd3e5fe2d5f9cb784446c04f6ebe61845e25c3bc27843c0fa186509538cbe52cb4f23f317a6affbf2af60ea4f8329ac15c8af09f02768137ba167de5dea821c9046073726", 0x7a}, {&(0x7f0000003d00)="1bb21c3de64b577865c3b5b25cc6d09d13a1f1e08542eda914f00a0569a80cc9192bacb5bd54aada8d3a08575160feeb5f9649f15a1f13ddd786d079f30675b2b823c1aceb8bdb73654d2724b9cc84573e893698543fc94334153fd3437686e87b23cccf714ba8d3d714e0150b7d2d4116ad74", 0x73}, {&(0x7f0000003d80)="d28157b2f2b3265f14bd8cf77f804c3bde994af2d7089323b31f9c0e2cafa5c574eb259c0a3f16beb7028efa827edeeae8bcbbed28ae9e62fef3e1b34176ec829510ccb6c258c71106e1ddd3934d129f494313413d0c771eccf483c60d460ee3f4d49904b1", 0x65}], 0x7, &(0x7f00000042c0)=[@rights={0x28, 0x1, 0x1, [r0, r0, r1, r0, r0]}, @cred={0x20, 0x1, 0x2, r45, r46, r47}, @rights={0x30, 0x1, 0x1, [r1, r0, r0, r0, r1, r0, r1]}, @cred={0x20, 0x1, 0x2, r48, r49, r50}, @cred={0x20, 0x1, 0x2, r51, r52, r53}], 0xb8, 0x81}], 0x5, 0x8010) r54 = syz_open_dev$audion(&(0x7f0000000040)='/dev/audio#\x00', 0x6, 0x2000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r54, 0xc01064b5, &(0x7f00000000c0)={&(0x7f0000000080)=[0x0, 0x0, 0x0], 0x3}) 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 6: socket$inet_sctp(0x2, 0x1, 0x84) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00003e0000)='/dev/ptmx\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) pipe(&(0x7f0000000080)) perf_event_open(&(0x7f0000b5a000)={0x4000000002, 0x78}, 0x0, 0x0, 0xffffffffffffffff, 0x0) getsockopt$IP_VS_SO_GET_DAEMON(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000140), &(0x7f0000000180)=0x44) setsockopt$inet6_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, &(0x7f0000000040)="32f4e583fb46bf5e20ad2e62c3bd8046", 0x10) setsockopt$IP_VS_SO_SET_STARTDAEMON(r1, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'gre0\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(0xffffffffffffffff, 0x0, 0x48c, &(0x7f0000001d00)={0x1, 'vcan0\x00'}, 0x18) r2 = syz_open_dev$binder(&(0x7f0000e0f000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r2, 0x0) ioctl$BINDER_SET_CONTEXT_MGR(r2, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f000075afd0)={0x4c, 0x0, &(0x7f000092b000)=[@transaction_sg={0x40486311, {{0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, &(0x7f0000bd1fb8), &(0x7f0000a81fe8)}}}], 0x0, 0x0, &(0x7f000005af7e)}) 2033/05/18 03:35:26 executing program 5: r0 = memfd_create(&(0x7f0000000140)='dev ', 0x0) write(r0, &(0x7f0000000040)="164690", 0x3) sendfile(r0, r0, &(0x7f0000001000), 0xffff) memfd_create(&(0x7f0000000000)='-em1\\!selinux\x00', 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r0, 0x0) mq_timedsend(0xffffffffffffffff, &(0x7f0000000180), 0x0, 0x0, &(0x7f0000000100)) 2033/05/18 03:35:26 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x0) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000180)='/dev/vcs\x00', 0x400, 0x0) socket$pptp(0x18, 0x1, 0x2) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000080)={0x1, [0x0]}, &(0x7f00000000c0)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000100)={r2, 0x10000}, &(0x7f0000000140)=0x8) 2033/05/18 03:35:26 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 182.790091] IPVS: sync thread started: state = MASTER, mcast_ifn = gre0, syncid = 0, id = 0 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f00000006c0)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000c8df6238624f899a09088870f4464e791dc0299b4f241892560cca6dd0c97d0f59dd62505a24827f7f041b17b6854dd0e25bbf6a0a3ace95cd05ad22af95f21136341bd76b1b3d2b01f9497390a3c98580ce51ef0bee45ffc68f93527842a600fdfa77e2f4110e017ad87475b90e1127be18a9168ace29f38aca5ead178d40fc7bbc253bd22e7f989257e11987a243a478621f000628bcabc4c9ab321ede13d087c9fd5c322fa66006a7f65e767bfd26f61529f3425b68356e01393f186bf4a1cf7347390b7852827ea8cf1a5d51a179c3ce73eb86ff83bf1277c5e9a11a8096212279758545d8127b80328e18d90dc580714e147d5607c4822fcf4d94c08ee2335d4bdd96876beb8fb05be7bcaafb5500000000000000000000003084c5212362b7527db2b3bba0715541ca7b229d3fd702a402cb3e2427fd3f8452f3567f5ffbf5ccf5418731ea425b6d08c80276bf1246720729516c4ecafc3533a347dc536cacf7bfaf845f9aaa4cf6ff76bf391b64cbadf5b542cc3f7f25ee32db2cc2b919b8c180abaee318bf836c6bcab7361102aba992d514c0b4bcb7c2cc02ab2261022f1d3aa27be5f348702eb1c877b94cce373eb8016383c827a13769707c629fd97ec33f80e4277483792c412533c546d8a438c547bf270437cc8a99ba145ff039cdf58694ed6a8a572733cf4debad448af93202b315087ae7360761d80ab821156ee0a5b630ad90db17f093c15cc67a0f3c1e94000000"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) [ 182.846846] binder: BINDER_SET_CONTEXT_MGR already set 2033/05/18 03:35:26 executing program 3: r0 = syz_open_dev$sg(&(0x7f0000000040)='/dev/sg#\x00', 0x80000001, 0x0) ioctl$DRM_IOCTL_ADD_CTX(0xffffffffffffff9c, 0xc0086420, &(0x7f0000000080)={0x0}) ioctl$DRM_IOCTL_SET_SAREA_CTX(r0, 0x4010641c, &(0x7f0000000100)={r1, &(0x7f00000000c0)=""/54}) r2 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) [ 182.872458] binder: 26651:26664 ioctl 40046207 0 returned -16 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 182.918210] binder: undelivered TRANSACTION_COMPLETE [ 182.923457] binder: undelivered transaction 21, process died. 2033/05/18 03:35:26 executing program 6: mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000002000)={0xaa}) socketpair(0x5, 0x80801, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet_sctp(r1, &(0x7f0000000440)={&(0x7f00000003c0)=@in={0x2, 0x4e20, @broadcast=0xffffffff}, 0x10, &(0x7f0000000400), 0x0, 0x0, 0x0, 0x8800}, 0x4008000) sendmsg$kcm(r2, &(0x7f0000000380)={&(0x7f00000000c0)=@generic={0x10, "6b0ce46f383c00465151175eb795fcb0c1eed10c5e1d55ad6aaa48b8bddc8b6f73a1612a8cc6926c907e334273260b4a94b8d85391c8e37fdecdfb0b57c5c37a72dc3a791890323e09c93737d2926bc4bce347c64c6d40968a311ddbb21ae9e8d1a14f3fe156e184597899c744ad22a9925cce3028a144174c483c9a804c"}, 0x80, &(0x7f0000000340)=[{&(0x7f0000000140)="107096b8141211016b376d279f5f23493340f555491ef80f30ef35986ed12e6e9e11ff5ae64b90401d9f79cb5fa2425c0b4dc90c4456ff0dc4d18af258ff229230f83a3105a5877c1dee600ba119f17da09239f9605e92bcbabee86a3475366d4675dbc802bd3b736b2601421da97820217eeeea0e74b6c3362c36e084af68df0d92bbbd7d2bf85afa9ef3f7d53b762d8ce9c379b32717acff9408d779a9", 0x9e}, {&(0x7f0000000040)="7d906755c7a1fe339cf4f7051be70d32", 0x10}, {&(0x7f0000000200)="132ad70884f84e896b86db6e6030d3292dd2a8381c2c4a65faa5c2ceece980267c22b6a8cbbd71db3dd80a16913d0bc4633b0b2493da06544c317d16afe03db3ffa96743479ee666a0eb460974862a5bbadebbb9a0a6c453090c009bb6bc6da33c4e2bdfc436111e262e6f182c9b6e118364f64c6098817e3153f78d63e1ecfe89b6a1c913afedfdae2724f75422a47e2648c2fe4951b793f805e5a5d0d47553f072e5a6adea26e1cbb69d2e95b7ab0591f46ffc9e0cd49e4d532c", 0xbb}, {&(0x7f00000002c0)="3b0fbe927037e16e5c5a29a28dac094fa94bf0e06725635447d8cb6041cde4dd1ebca18d24188562ad7c1a63d0063e7f22965a22191441bfae1c8123d74f5ab8a9d59909a1176e5deedc0dabbcb565b747b4674d280125256f0a0253c9b52fb7984ef61a56c6f51bf3fef5ec2a469239f8cef05fb822fcfa", 0x78}], 0x4, 0x0, 0x0, 0x10}, 0x20000080) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000001000)={{&(0x7f0000011000/0x3000)=nil, 0x3000}, 0x1}) ioctl$TIOCEXCL(r2, 0x540c) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f0000012f18)={{{@in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}, @in=@loopback=0x7f000001}}, {{@in=@multicast1=0xe0000001}, 0x0, @in6=@local={0xfe, 0x80, [], 0xffffffffffffffff}}}, 0xe8) ioctl$LOOP_CHANGE_FD(r2, 0x4c06, r1) getsockopt$inet_tcp_buf(r3, 0x6, 0xb, &(0x7f0000128000)=""/210, &(0x7f0000663ffc)=0xd2) ioctl$UFFDIO_ZEROPAGE(r0, 0x8010aa02, &(0x7f0000000080)={&(0x7f0000011000/0x3000)=nil, 0x3000}) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$sndmidi(&(0x7f0000000140)='/dev/snd/midiC#D#\x00', 0x10001, 0x92000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffff9c, 0x8933, &(0x7f0000000180)={'syzkaller1\x00', 0x0}) ioctl$TUNSETIFINDEX(r1, 0x400454da, &(0x7f00000001c0)=r2) getsockopt$inet_sctp6_SCTP_MAXSEG(r1, 0x84, 0xd, &(0x7f0000000200)=@assoc_value={0x0, 0x2}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000000380)={r3, 0x3, 0x7, [0x7, 0x13800000, 0xfba5, 0x6, 0xfff, 0x1c29, 0x46]}, 0x16) r4 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, 0xfffffffffffffff9) keyctl$get_security(0x11, r4, &(0x7f00000000c0)=""/99, 0x63) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r5 = syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xde94, 0x0) ioctl$KVM_SET_NR_MMU_PAGES(r5, 0xae44, 0x5) ioctl$PERF_EVENT_IOC_PERIOD(r1, 0x40082404, &(0x7f00000003c0)=0x800) getsockopt$bt_BT_FLUSHABLE(r1, 0x112, 0x8, &(0x7f0000000240)=0x400, &(0x7f0000000280)=0x4) ioctl$DRM_IOCTL_WAIT_VBLANK(r5, 0xc018643a, &(0x7f00000004c0)={0x6000003e, 0xfffffffffffffffe, 0x25}) r6 = gettid() ptrace$getregs(0xe, r6, 0xfffffffffffffb46, &(0x7f0000000400)=""/183) modify_ldt$write(0x1, &(0x7f0000000300)={0x400, 0xffffffff, 0x3000, 0x81, 0x40, 0x4a2, 0x6, 0x29e, 0x3ff, 0x3ff}, 0x10) 2033/05/18 03:35:26 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678ba80a8"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:26 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000f80)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e2100000873ce026a26c719970001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="83000000c8df6238624f899a09088870f4464e791dc0299b4f241892560cca6dd0c97d0f59dd62505a24827f7f041b17b6854dd0e25bbf6a0a3ace95cd05ad22af95f21136341bd76b1b3d2b01f9497390a3c98580ce51ef0bee45ffc68f93527842a600fdfa77e2f4110e017ad87475b90e1127be18a9168ace29f38aca5ead178d40fc7bbc253bd22e7f989257e11987a243a478621f000628bcabc4c9ab321ede13d087c9fd5c322fa66006a7f65e767bfd26f61529f3425b68356e01393f186bf4a1cf7347390b7852827ea8cf1a5d51a179c3ce73eb86ff83bf1277c5e9a11a8096212279758545d8127b80328e18d90dc580714e147d5607c4822fcf4d94c08ee2335d4bdd96876beb8fb05be7bcaafb5500000000000000000000003084c5212362b7527db2b3bba0715541ca7b229d3fd702a402cb3e2427fd3f8452f3567f5ffbf5ccf5418731ea425b6d08c80276bf1246720729516c4ecafc3533a347dc536cacf7bfaf845f9aaa4cf6ff76bf391b64cbadf5b542cc3f7f25ee32db2cc2b919b8c180abaee318bf836c6bcab7361102aba992d514c0b4bcb7c2cc02ab2261022f1d3aa27be5f348702eb1c877b94cce373eb8016383c827a13769707c629fd97ec33f80e4277483792c412533c546d8a438c547bf270437cc8a99ba145ff039cdf58694ed6a8a572733cf4debad448af93202b315087ae7360761d80ab821156ee0a5b630ad90db17f093c15cc67a0f3c1e94000000"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:26 executing program 5: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0x70, 0x2003e3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @perf_bp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0, 0x0, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000400)={0xe, 0x4, 0x4, 0x8}, 0x2c) lsetxattr(&(0x7f0000000040)='./file0\x00', &(0x7f0000000280)=@known='security.capability\x00', &(0x7f00002b2fec)="0000000201000000000000010400000000000000", 0x14, 0x0) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff000, 0x3, 0x32, 0xffffffffffffffff, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = socket$inet6(0xa, 0x80000, 0x400) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r2, 0x84, 0x12, &(0x7f0000adb000), &(0x7f0000698000)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r3, &(0x7f0000a34fff)='H', 0x1, 0x0, &(0x7f0000030ff0)={0x2, 0x4e20, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0x10) sendto$inet(r3, &(0x7f000026cfff)="c6", 0x1, 0x0, &(0x7f0000033ff0)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff, 0xbb}}, 0x10) shutdown(r3, 0x1) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f00001afff8)={0x0, 0x2000000002}, 0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000c60000)={0x3}, 0x10) write(r3, &(0x7f000052c000)="c65ff5f449dd44315317d0ff010000665b3c8d27355494f18ea39b59fbb27c7aa812de54f34f29e9", 0x28) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000810000)={0x0, 0x1}, 0x8) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000300)={0x1, &(0x7f0000acbff8)=[{0x6, 0x8, 0x0, 0x6}]}, 0x10) ioctl$PERF_EVENT_IOC_PERIOD(r0, 0x40082404, &(0x7f00000001c0)=0x8) ioctl$sock_SIOCOUTQ(r3, 0x5411, &(0x7f0000000200)) setsockopt$inet6_int(r1, 0x29, 0x42, &(0x7f000098dffc)=0x6, 0x4) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0x100000001}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000080)={r4, 0x200}, 0x8) bind$inet6(r1, &(0x7f0000807fe4)={0xa, 0x4e22}, 0x1c) r5 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x20080, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={r1, r5, 0x1, 0x1}, 0x10) sendto$inet6(r1, &(0x7f00002a0b14), 0x0, 0x200408d4, &(0x7f000072e000)={0xa, 0x4e22, 0x0, @loopback={0x0, 0x1}}, 0x1c) sendto(r1, &(0x7f000092d000)="d5", 0x1, 0x1, &(0x7f0000ad9000)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev={[0xaa, 0xaa, 0xaa, 0xaa]}}, 0x80) close(r1) r6 = open$dir(&(0x7f0000000080)='./file0\x00', 0x8203, 0xb3) r7 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x2000, 0x0) setsockopt$bt_BT_FLUSHABLE(r7, 0x112, 0x8, &(0x7f0000000180)=0x5, 0x4) renameat(r6, &(0x7f00000000c0)='./file0\x00', r7, &(0x7f0000000140)='./file0\x00') 2033/05/18 03:35:26 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:26 executing program 3: r0 = socket$packet(0x11, 0x1, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 6: socketpair$inet6_icmp_raw(0xa, 0x3, 0x3a, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) fallocate(r0, 0x45, 0xfff, 0x10000104) getsockopt$inet6_int(r1, 0x29, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}}, 0x5, 0x0, 0x0, 0x8, 0x40}, &(0x7f0000000180)=0x98) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r2, 0x84, 0x13, &(0x7f00000001c0)={r3, 0xfb2b}, &(0x7f0000000200)=0x8) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) timerfd_gettime(r1, &(0x7f0000000080)) 2033/05/18 03:35:27 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 5: perf_event_open(&(0x7f000025c000)={0x2, 0x78, 0x3e2}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu\x00', 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000080)='cpuset.sched_relax_domain_level\x00', 0x2, 0x0) open_by_handle_at(r0, &(0x7f0000000100)={0x28a, 0x1, "97c21700035167905088f8eb5244b2ba4d9f9ad4aa3f7b17d7e8da4edfd399cd511223a3ba3040a8672ca526bfe9af0000"}, 0xc80) mount(&(0x7f0000000000)='./file0\x00', &(0x7f0000447000)='./file0\x00', &(0x7f00000e1000)='msdos\x00', 0x0, &(0x7f000097bfff)) 2033/05/18 03:35:27 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r8, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r7}) r9 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000500)={r10, 0x6}, 0x8) 2033/05/18 03:35:27 executing program 6: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x9}, &(0x7f0000000400)=0x8) r2 = syz_open_dev$dspn(&(0x7f0000004ff6)='/dev/dsp#\x00', 0x0, 0x4) poll(&(0x7f0000000100)=[{r2}], 0x1, 0x3f) socket$packet(0x11, 0x0, 0x300) mlockall(0x1) r3 = syz_open_dev$binder(&(0x7f000000cff3)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000340)=0x4) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000004000)={0x4, 0x0, &(0x7f000000cf90)=[@enter_looper={0x630c}], 0x0, 0x0, &(0x7f0000005000)}) r4 = semget$private(0x0, 0x0, 0xc) semctl$IPC_INFO(r4, 0x0, 0x3, &(0x7f0000000500)=""/52) ioctl$BINDER_SET_CONTEXT_MGR(r3, 0x40046207, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f000000ffd0)={0x0, 0x0, &(0x7f000000f000), 0x1, 0x0, &(0x7f00000000c0)='b'}) mmap$binder(&(0x7f000000c000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000040)={0x70, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="04eb58ff1eb0620c5f53e2c814dd4fc8662e86d9c6a3525b9db7e85c9b40e3d7791e0ec42a0ab39782be501691f1ecc266e2916912e03aa8f9b1dea70b7c11cc55756d9dbc6410756eea2290ec2b331bc42c10ca00290c549218cec0cc224f3d", @ANYRES64=0x0, @ANYBLOB="0000000000000000933df32fd724a30764e6ebef0f6770e3168bd6d265d9c0c6bb00d7b4327f182c2c6f6f69fd2afc7df7b7a7ac80f8f7c80221a4778b9cf72a4c9aeb3d0104f9f6111bf6a696311804ecb332fa2f759e1a9c22df90672f8fef6f3298414edaa1ccd79b0128015dac5851401c366baadefd04b5eb7d799b0fa98e6dfaf5b45ee1655abfc6cb0745e7833702df80e5eb9a6e9a047bc0588e22a2f309f76d0cedafdf91acbc6ad2a983ac47a6078021d62b8be4aedd4f767d73addd0de6d729dc621059ac10e7b99be93810cee6c7cbc99c300b1823e6b4c49f336454c2384afa6b1f6508a956faabebbc0494277588"], 0x4c, 0x0, &(0x7f0000000480)="89abfb19f985110ad81d5ec023077629ac1268a35e12c4ec610768b838788a28616793c2337eaf672546c4c37f16b2d218ba5818cbc5c0d7beb0209aeecdaf3cd1c9a60b77bff2fec027fc82"}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r2, 0x40a85323, &(0x7f0000000200)={{0x0, 0x8}, 'port0\x00', 0x0, 0x80000, 0x0, 0x4, 0xe54, 0x3, 0x0, 0x0, 0x2, 0x3}) readv(r2, &(0x7f00000000c0)=[{&(0x7f0000000140)=""/98, 0x24}], 0x1) ioctl$sock_SIOCDELDLCI(r2, 0x8981, &(0x7f00000001c0)={'vcan0\x00', 0x3}) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000380)={r1, 0x8, 0x6, 0x8d0}, &(0x7f0000000440)=0x10) openat$cgroup_ro(r0, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000540)) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000000)) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x3, r0, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TEMPO(r1, 0x402c5342, &(0x7f0000000080)={0xfffffffffffffffc, 0x5, 0x4, {0x0, 0x1c9c380}, 0x3, 0x3f}) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) pwrite64(r0, &(0x7f0000000040)="28d9bb093ed7f24cd59f630abffa6f98dc314ac5f5efa1f7a5985e8a15297f41c32c55f7ddeae0f4ab824b600990a924b2d25ea9d5400a73688d73e28093acf6dc5bb2a84bd43a99ab2265b2d309f2d3f7a90d2cce6feea971e69488818c2d62bcc02d80c54b362569a7b6881a9417f8ddfb5a82568fd22bc6f4b1", 0x7b, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r0, 0x0, 0x82, &(0x7f00000000c0)={'broute\x00'}, &(0x7f0000000140)=0x78) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d7524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf01706000000000000008808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970ade1c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:27 executing program 5: mmap(&(0x7f0000000000/0xfd8000)=nil, 0xfd8000, 0x4, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6(0xa, 0xa, 0xffffffffffffffff) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000cde000)={0x0, {{0xa, 0x0, 0x0, @empty, 0x1}}, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x1, [], 0x1}}}}, 0x108) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2020000000000000, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(0xffffffffffffffff, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) [ 183.811698] binder: 26768:26776 unknown command -10949884 [ 183.820823] binder: 26768:26776 ioctl c0306201 20000040 returned -22 [ 183.860340] binder: 26768:26835 ioctl c0306201 20004000 returned -14 [ 183.881203] binder: BINDER_SET_CONTEXT_MGR already set [ 183.886643] binder: 26768:26830 ioctl 40046207 0 returned -16 [ 183.903548] binder_alloc: binder_alloc_mmap_handler: 26768 2000c000-2000e000 already mapped failed -16 [ 183.913153] binder: 26768:26836 unknown command -10949884 [ 183.919222] binder: 26768:26836 ioctl c0306201 20000040 returned -22 2033/05/18 03:35:27 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(0xffffffffffffffff, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) getpid() mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x4000000000000002, 0x300) socket$can_bcm(0x1d, 0x2, 0x2) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000100)='/dev/rfkill\x00', 0x0, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1f, &(0x7f0000000040)={@dev}, &(0x7f00000001c0)=0x14) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc02c5341, &(0x7f0000000140)) 2033/05/18 03:35:27 executing program 5: r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$KDSETLED(0xffffffffffffffff, 0x4b32, 0x81) socket$inet(0x2, 0x2, 0x0) r1 = dup2(r0, r0) bind$inet(r0, &(0x7f000000f000)={0x2, 0x0, @loopback=0x7f000001}, 0x10) ioctl$PIO_UNISCRNMAP(r1, 0x4b6a, &(0x7f0000000100)="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") connect$inet(r1, &(0x7f0000f6a000)={0x2, 0x0, @multicast2=0xe0000002}, 0x10) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast2=0xe0000002, @loopback=0x7f000001, @local={0xac, 0x14, 0xffffffffffffffff, 0xaa}}, 0xc) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000f69ff4)={@multicast2=0xe0000002, @loopback=0x7f000001, @loopback=0x7f000001}, 0xc) ioctl$DRM_IOCTL_GET_CAP(r1, 0xc010640c, &(0x7f0000000000)={0x4, 0x2}) 2033/05/18 03:35:27 executing program 6: r0 = socket$inet6(0x10, 0x80003, 0x3) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x482, &(0x7f0000000080)=""/219, &(0x7f0000000180)=0xdb) sendmsg(r0, &(0x7f000000bfc8)={&(0x7f0000000000)=@nl=@proc={0x10}, 0x80, &(0x7f0000002000)=[{&(0x7f0000001000)="5500000018007fafb72d1cb2a4a280930206000000a843096c26236925000800040000001000ca8a9848a3c728f1c46b7b31afdc1338d54400009b84136ef75afb83de448daa7227c43ab8220000bf0cec6bab91d4", 0x55}], 0x1, &(0x7f0000004000)}, 0x0) 2033/05/18 03:35:27 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r5) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:27 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x0, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 5: r0 = open(&(0x7f0000000000)='./bus\x00', 0x141042, 0x0) connect$bt_sco(r0, &(0x7f0000000040)={0x1f, {0x8080000000, 0x6, 0x40, 0x5, 0x0, 0x4}}, 0x8) fallocate(r0, 0x0, 0xffff, 0x3fc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000ccb000)={0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000eb0fb8)={0x1, 0x3, &(0x7f00009ff000)=ANY=[@ANYBLOB="180000000001000000000000000000009500000000000000"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f00006ab000)=""/183}, 0x48) r2 = socket$kcm(0x29, 0x1000000000000005, 0x0) sendmmsg(r2, &(0x7f0000002dc0)=[{{&(0x7f0000002040)=@can={0x1d}, 0x80, &(0x7f00000025c0)=[{&(0x7f0000002080)='h', 0x1}], 0x1, &(0x7f00000036c0)}}], 0x1, 0x0) close(r2) r3 = open(&(0x7f0000002000)='./bus\x00', 0x141042, 0x0) mmap(&(0x7f0000006000/0x3000)=nil, 0x3000, 0x7, 0x11, r3, 0x0) madvise(&(0x7f0000007000/0x2000)=nil, 0x2000, 0x9) clock_gettime(0x0, &(0x7f0000000100)) sendmsg$nfc_llcp(r3, &(0x7f0000000580)={&(0x7f0000000300)={0x27, 0x1, 0x1, 0x0, 0x8, 0x0, "ba5c1ec6c7f7e1ac226947b9e09fccbe0678d708e7f8ccd7607cd259e3fc80c2e2e6388ff9cd8b674de1c649d649b41c721999598b886aecba9f267f58ca63", 0x3d}, 0x60, &(0x7f0000000400)=[{&(0x7f0000000080)="e6b770b4", 0x4}, {&(0x7f0000000140)="9eb7c225eeb7a12cf8f0", 0xa}, {&(0x7f0000000380)="7f81bc2309356ce84c5ce0661e7ffc45430b828f41d73413258ad8930b9d16d89a7851fde246614199c000bb7d7088d45b6af7b9f495facdecee45582fc1ca0055121d9566ca164276d22a72e6434e2649845c38eff7eab1b875c2ffbc9749a3596553a3f772e8542b177b532f", 0x6d}, {&(0x7f0000000200)="61b0", 0x2}, {&(0x7f0000000280)="c0de3eb873de27832d9c32ca0b3bcf21a9ca380dd773", 0x16}], 0x5, &(0x7f0000000480)={0xe0, 0x102, 0x5, "f723753a55e6f49e1c47c60802f8df019f27610866f77297664dcb6aadf58d426ba76f00a701546f83cc6cc29c63ffe39db9419dc1a10a60facc1f6748947049e47cb2942266f76ebdb681265ab32d53980fb744cd1e33f505f4d11d23854dbd560420302cd7f98e2d813bd36ca970383645f949d94d22edae28f23bbf98a0b5d68be5a0c89ca6769d087fdbc230ffaa8b2cad1ab84051f81f84bef409ebb3cbeac849443f5bcf082754ff8078e7c9bbb3b490d7423e879fb2d4626875130a70caae2a468f2fa71f84062359"}, 0xe0, 0x800}, 0x4000080) ioctl$VHOST_SET_VRING_CALL(r0, 0x4008af21, &(0x7f0000000240)={0x3, r0}) clock_gettime(0x0, &(0x7f0000000180)) write$sndseq(r3, &(0x7f00000001c0)=[{0x9, 0x80000001, 0x3, 0x0, @time, {0x1}, {0xffbd, 0x4}, @quote={{0x9}, 0x4, &(0x7f00000000c0)={0x100, 0x7, 0x7, 0x2, @tick=0x6, {0x100, 0xdb99}, {0x2}, @raw8={"8d54b71b0bf1f1bb419de28f"}}}}], 0x30) remap_file_pages(&(0x7f0000007000/0x1000)=nil, 0x1000, 0x0, 0x1, 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f00000002c0)={0x18, 0x0, {0x3, @empty, 'irlan0\x00'}}) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) getpid() mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) clock_gettime(0x0, &(0x7f0000000680)={0x0, 0x0}) ioctl$EVIOCGEFFECTS(0xffffffffffffffff, 0x80044584, &(0x7f0000000700)=""/197) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000040)=""/77, 0x4d}, {&(0x7f00000000c0)=""/79, 0x4f}, {&(0x7f0000000140)=""/20, 0x14}], 0x3, &(0x7f00000001c0)=""/249, 0xf9, 0x8001}, 0x161}, {{&(0x7f00000002c0)=@un=@abs, 0x80, &(0x7f0000000580)=[{&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/250, 0xfa}, {&(0x7f00000004c0)=""/137, 0x89}], 0x3, &(0x7f00000005c0)=""/24, 0x18, 0x4}, 0x3}], 0x2, 0x62, &(0x7f00000006c0)={r1, r2+10000000}) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 6: r0 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000)='/dev/autofs\x00', 0x100, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000040)=@assoc_value={0x0, 0xea3}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x0, 0xe5, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}, 0x200}}, 0x5, 0x2}, 0x90) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.net\x00', 0x200002, 0x0) r2 = syz_open_dev$sndseq(&(0x7f00000000c0)='/dev/snd/seq\x00', 0x0, 0x0) read(r2, &(0x7f00009db000)=""/28, 0x1c) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000100)='/dev/sequencer\x00', 0x10081, 0x0) r4 = openat$qat_adf_ctl(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/qat_adf_ctl\x00', 0x0, 0x0) ioctl$VHOST_NET_SET_BACKEND(r3, 0x4008af30, &(0x7f0000000640)={0x3, r4}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r2, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r2, 0x4040534e, &(0x7f000019ffe9)={0xc1}) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000004c0)=@assoc_value={r1, 0x10001}, &(0x7f0000000500)=0x8) setsockopt$RDS_CANCEL_SENT_TO(r4, 0x114, 0x1, &(0x7f0000000480)={0x2, 0x4e24, @remote={0xac, 0x14, 0x14, 0xbb}}, 0x10) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_CLIENT(r2, 0x40bc5311, &(0x7f0000000140)={0x80, 0x1}) ioctl$SNDRV_SEQ_IOCTL_GET_PORT_INFO(r2, 0xc0a85322, &(0x7f0000000000)) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000fdbff0)='/dev/sequencer2\x00', 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r3, 0x114, 0x6, &(0x7f0000000380), 0x4) r6 = request_key(&(0x7f0000000680)='rxrpc_s\x00', &(0x7f0000000400)={0x73, 0x79, 0x7a, 0x1}, &(0x7f0000000440)="012e5d00", 0xfffffffffffffffb) add_key$keyring(&(0x7f0000000540)='keyring\x00', &(0x7f0000000600)={0x73, 0x79, 0x7a, 0x1}, 0x0, 0x0, r6) r7 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000003c0)='/dev/hwrng\x00', 0x282, 0x0) readlink(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0) utime(&(0x7f0000000580)='./file0\x00', &(0x7f00000005c0)) modify_ldt$write(0x1, &(0x7f0000000340)={0x7, 0x20000800, 0x2000, 0x1, 0x6, 0x0, 0x800000000000, 0x8, 0x0, 0x1}, 0x10) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000200)={r1}, &(0x7f0000000240)=0x8) sendmsg$inet_sctp(r7, &(0x7f0000000c00)={&(0x7f00000006c0)=@in6={0xa, 0x4e21, 0x7fffffff, @local={0xfe, 0x80, [], 0xaa}, 0x1}, 0x1c, &(0x7f0000000a00)=[{&(0x7f0000000700)="fd70bd54fd05", 0x6}, {&(0x7f0000000740)="7e29a5a2b4c326c92741462324d1891e3825878d9f80e246daeab87a2adb87cf46479dd03dd73ea56e4ca867526e043b3844af92e367191b7e7f9ddad4396a5d54778a50a4f036dd98c9f57fe355ece09320210cd248492b1931dc3a7dc006af7bf3e3ac916babd921e2570c01b221fa42e9ec4487eed11359b72b8c8913d6631fc65c2af08372f647c66f3d192d2a9a2329daeb390738d625300f227ff8c83d05f28a72ea134389773a4a108379f380e96a7e815b730d49e678c79bb836d7bfc015d14ae7254b41a81d5819b983125717be9b6d6780ab4fdde4ef91c86e2ec426ead60ded3a6b10d609887edbb602298ca6a3d4", 0xf4}, {&(0x7f0000000840)="b802bf3d98da456acfdee9deb224981bc0266bd7318410fddc9f26fe42d2cf23338fc6513dc41adc78359f311d508fc12559d276e2e3c6c5c6c5d14a4093e258cde43ca01957fe6a72f0ee6a3ede", 0x4e}, {&(0x7f00000008c0)="81b63d5d1004096428da8fecb9d82a46bd0e789af2f7dc90ae3d20af578cb6b1454ee104ae55d58d6a941d76e8980b72d10599e7ad5f51e83658fd2169d130225d6b17d577831aabb5c96d163368189f6304a2043142e79cd971412aaafcc164931d850280869ff2a6a54becc9b44f4c249d35882203ac6db1034fd0324a4bf8a4", 0x81}, {&(0x7f0000000980)="0a5e7c5f58693c13824d1c445344b049527352c4a43f16eb3e3423908cd2c4a4a74c1c93449c629e793bfb84c675b3a37c912fbc83cea301038a58ef757408cdd745135bc85f7ff803faba896ef7ad89c39cb4b088be7a36e9e76ede353c9da9a222", 0x62}], 0x5, &(0x7f0000000a80)=[@sndrcv={0x30, 0x84, 0x1, {0x9, 0xd1f9, 0x2, 0x1, 0x55, 0x4, 0x19, 0x7fffffff, r8}}, @sndrcv={0x30, 0x84, 0x1, {0x6, 0x241d, 0x820b, 0x1, 0x0, 0x9, 0x9, 0x3ff, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x7fff, 0x0, 0x100000000, 0x7f, r1}}, @init={0x18, 0x84, 0x0, {0x100, 0xdb, 0x3ff, 0x5}}, @sndinfo={0x20, 0x84, 0x2, {0x2a, 0x204, 0x7, 0x5, r5}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x1, 0x3, 0x7, r8}}, @sndinfo={0x20, 0x84, 0x2, {0x4, 0x8207, 0x7, 0x70a2, r5}}, @init={0x18, 0x84, 0x0, {0x33, 0x8, 0x0, 0x8001}}], 0x180}, 0x1) 2033/05/18 03:35:27 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x0, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:27 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:27 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) ftruncate(r0, 0x0) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) r1 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/dsp\x00', 0x600000, 0x0) ioctl$KVM_GET_XCRS(r1, 0x8188aea6, &(0x7f0000000080)={0x1, 0xff, [{0x2368, 0x0, 0x8}]}) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) getpid() mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 3: r0 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x2, 0x8000) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000080)={@rand_addr=0x50, @loopback=0x7f000001, 0x1, 0x1, [@loopback=0x7f000001]}, 0x14) r1 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:27 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:27 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x0, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 6: r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000)='/dev/kvm\x00', 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$hwrng(0xffffffffffffff9c, &(0x7f00000001c0)='/dev/hwrng\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f00000000c0)=[@textreal={0x8, &(0x7f0000000080)="baa100b000eef36cba2100ec66b9800000c00f326635001000000f30bad104ecc80080d267d9f8f30f1bb429000f20c06635200000000f22c067f3af", 0x3c}], 0x236, 0x0, &(0x7f0000000100), 0x1b5) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_SET_DEBUGREGS(r2, 0x4080aea2, &(0x7f0000000300)={[0x2000, 0x4, 0x0, 0x6000], 0x5, 0x10, 0x400}) ioctl$KVM_SET_DEBUGREGS(0xffffffffffffffff, 0x4080aea2, &(0x7f0000000240)={[0x10000, 0x112000, 0x2000, 0x5004], 0x4, 0x62}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(0xffffffffffffffff, 0x118, 0x1, &(0x7f0000000140)=0x8000000081, 0x4) ioctl$KVM_RUN(r3, 0xae80, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x190d) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000040)={0x0, 0x5a4a5d6f984a7ada, 0x67dd}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(0xffffffffffffffff, 0x84, 0x75, &(0x7f0000000180)={0x0, 0x1ff}, &(0x7f00000002c0)=0x8) ioctl$KVM_RUN(r3, 0xae80, 0x0) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300), 0x0, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f00000006c0)='/dev/vcs#\x00', 0xa960, 0x4000101400) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000001100)=ANY=[@ANYBLOB="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", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000f80)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r8, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00'}) r9 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x11, &(0x7f0000000500)={r10, 0x6}, 0x8) 2033/05/18 03:35:28 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 5: r0 = syz_open_dev$mice(&(0x7f00000000c0)='/dev/input/mice\x00', 0x0, 0x101000) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r0, 0x408c5333, &(0x7f0000000240)={0x0, 0x1, 0xfffffffffffffff8, 'queue1\x00', 0xcd}) ioctl$KVM_SET_BOOT_CPU_ID(r0, 0xae78, &(0x7f0000000100)) r1 = syz_open_dev$usbmon(&(0x7f0000000000)='/dev/usbmon#\x00', 0x0, 0x0) ioctl$TIOCGSID(r1, 0x5429, &(0x7f0000000140)=0x0) ioctl$KVM_GET_ONE_REG(r0, 0x4010aeab, &(0x7f0000000380)={0xfffffffffffffffc, 0x191f}) fcntl$getownex(r0, 0x10, &(0x7f0000000300)={0x0, 0x0}) kcmp$KCMP_EPOLL_TFD(r2, r3, 0x7, r1, &(0x7f0000000340)={r0, r1, 0xfff}) request_key(&(0x7f0000000180)='pkcs7_test\x00', &(0x7f00000001c0)={0x73, 0x79, 0x7a, 0x2}, &(0x7f0000000200)='/dev/usbmon#\x00', 0xfffffffffffffffd) ioctl$KVM_SET_TSS_ADDR(r1, 0xae47, 0xd000) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_TEMPO(r1, 0xc0109207, &(0x7f0000000040)) 2033/05/18 03:35:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 6: r0 = gettid() ioctl$sock_SIOCGPGRP(0xffffffffffffff9c, 0x8904, &(0x7f0000000000)) setpgid(r0, r0) r1 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vcs\x00', 0x1, 0x0) setsockopt$netrom_NETROM_T4(r1, 0x103, 0x6, &(0x7f0000000080), 0x4) 2033/05/18 03:35:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000040)={@dev, 0x0}, &(0x7f0000000080)=0x14) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000000c0)={r1, 0x1, 0x6, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff]}, 0x10) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0xffffffffffffffc2) 2033/05/18 03:35:28 executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040)='/dev/ppp\x00', 0x10000, 0x0) ioctl$KDSETKEYCODE(r0, 0x4b4d, &(0x7f0000000080)={0x1000, 0x1}) r1 = socket$packet(0x11, 0xfffffffffffffffc, 0x300) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881", 0x2a, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 6: r0 = perf_event_open(&(0x7f000025c000)={0x2, 0xffffffffffffffa2, 0x3e2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x0, 0x0, 0xffffffffffffffff, 0x0) r1 = perf_event_open(&(0x7f000001d000)={0x5, 0x78, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, @perf_bp={&(0x7f0000000000), 0x1}}, 0x0, 0x0, 0xffffffffffffffff, 0x0) nanosleep(&(0x7f0000000080)={0x0, 0x1c9c380}, &(0x7f00000000c0)) r2 = timerfd_create(0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r0, 0x84, 0x4, &(0x7f00000002c0)=0x10001, 0x4) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) fcntl$F_SET_FILE_RW_HINT(r1, 0x40e, &(0x7f0000000280)=0x4) timerfd_settime(r2, 0x1, &(0x7f0000005000)={{0x0, 0x4}, {0x0, r3+30000000}}, &(0x7f0000ba9000)) read(r2, &(0x7f0000000000)=""/23, 0x17) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='ns/ipc\x00') syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$PERF_EVENT_IOC_QUERY_BPF(r4, 0xc008240a, &(0x7f0000000180)=ANY=[@ANYBLOB="020000000000000000000000c0f125fbfcb7138bb13abf9881c6a4cef1"]) r5 = dup3(r1, r0, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f0000000700)) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x10}) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r1 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r1, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r3 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r3, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r3, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r3, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in6=@remote, @in=@rand_addr, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast1}, 0x0, @in6=@dev}}, &(0x7f0000000140)=0xe8) ioctl$sock_inet6_SIOCDIFADDR(r0, 0x8936, &(0x7f0000000180)={@remote={0xfe, 0x80, [], 0xbb}, 0x79, r1}) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @local={0xfe, 0x80, [], 0xaa}}, 0x1c) 2033/05/18 03:35:28 executing program 5: r0 = socket(0x40000000015, 0x5, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000200)=0x5) setsockopt$netrom_NETROM_IDLE(r0, 0x103, 0x7, &(0x7f0000000000)=0x100000000, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000040)='/dev/vhost-net\x00', 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, &(0x7f0000c97ff8)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000001140)='/dev/audio\x00', 0x0, 0x0) close(r3) socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000000)=0x200000000) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000001480)={0x0, 0x0, &(0x7f0000001300)=""/81, &(0x7f0000001380)=""/21, &(0x7f00000013c0)=""/143}) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) setsockopt$l2tp_PPPOL2TP_SO_RECVSEQ(r0, 0x111, 0x2, 0x1, 0x4) r4 = creat(&(0x7f0000000180)='./file0/bus\x00', 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, &(0x7f0000000640)={@remote, @multicast2}, &(0x7f0000000680)=0xc) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f00000006c0)={0x0, 0x1, 0x6, @random="667928c0b3b5"}, 0x10) request_key(&(0x7f0000000040)='user\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x2}, &(0x7f00000000c0)='ppp0/\x00', 0x0) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000a40), &(0x7f0000000a80)=0xc) ioctl$PIO_UNISCRNMAP(r4, 0x4b6a, &(0x7f0000000240)="34620933e231db2c8a30e8cce6c7c24c80da5473bb7bc712b7a300b75a0e35b91ee08a464db51e91d290125cbd3b25398dade7f031f69f2caa8236eb6688893bb766adc4aeea1f9b79") fcntl$lock(r4, 0x7, &(0x7f0000000580)={0x3, 0x0, 0x7fffffff}) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000380)={0x0, 0x68, &(0x7f00000002c0)=[@in={0x2}, @in={0x2, 0x4e22}, @in6={0xa, 0x4e22, 0x0, @mcast2={0xff, 0x2, [], 0x1}, 0x8}, @in6={0xa, 0x4e21, 0x0, @ipv4={[], [0xff, 0xff], @remote={0xac, 0x14, 0x14, 0xbb}}}, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x11}}]}, &(0x7f00000003c0)=0x10) sysinfo(&(0x7f0000000bc0)=""/188) r5 = socket(0x1e, 0x1000000000005, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000140)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000001380)={0x3, 0x2, &(0x7f00000000c0)=@raw=[@exit={0x95}], &(0x7f0000000100)='syzkaller\x00', 0x2, 0xb9, &(0x7f00000012c0)=""/185, 0x0, 0x0, [], r6}, 0x48) pread64(r2, &(0x7f00000014c0)=""/4096, 0x1000, 0x0) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000d7c000)={0x0, r3}) write$vnet(r2, &(0x7f00000010c0)={0x1, {&(0x7f0000001140), 0x25d, &(0x7f0000001180)=""/162, 0x0, 0x2}}, 0x68) setreuid(0x0, r1) 2033/05/18 03:35:28 executing program 3: r0 = dup2(0xffffffffffffff9c, 0xffffffffffffffff) name_to_handle_at(r0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)={0x104, 0x5, "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"}, &(0x7f00000001c0), 0x1400) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x1000, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) ioctl$LOOP_CHANGE_FD(r0, 0x4c06, r0) ioctl$TUNSETNOCSUM(r0, 0x400454c8, 0x0) 2033/05/18 03:35:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881", 0x2a, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 6: r0 = syz_open_dev$sndseq(&(0x7f0000000140)='/dev/snd/seq\x00', 0x0, 0x101000) read(r0, &(0x7f0000fb6000)=""/28, 0x1c) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r0, 0xc0a85320, &(0x7f0000418f50)={{0x80}, "0a4ceaa05d9a00000000000000039b3fd4cec307e8ef3d13eb790ec9c65abaf90d229db692542e5b78f8b29e0a27800f0000000000000009fb42f376589701a4", 0xa9824f69d1376637, 0x10800a}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f000019ffe9)={0xc1}) ioctl$SNDRV_SEQ_IOCTL_QUERY_SUBS(r0, 0xc058534f, &(0x7f0000000000)) ioctl$SNDRV_SEQ_IOCTL_GET_QUEUE_INFO(r0, 0xc08c5334, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue1\x00'}) socketpair(0x5, 0x4, 0x7, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet6_MCAST_LEAVE_GROUP(r1, 0x29, 0x2d, &(0x7f0000000340)={0x4, {{0xa, 0x4e22, 0x5, @local={0xfe, 0x80, [], 0xaa}, 0xcaa0}}}, 0x88) r2 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000efb000)='/dev/sequencer2\x00', 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000000c0)={0x0, 0x4}, &(0x7f0000000100)=0x8) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180)='threaded\x00', 0x9) r4 = add_key$keyring(&(0x7f0000000000)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a}, 0x0, 0x0, 0xfffffffffffffffc) keyctl$get_persistent(0x16, 0x0, r4) keyctl$clear(0x7, r4) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r2, 0x84, 0x5, &(0x7f0000000280)={r3, @in={{0x2, 0x4e22, @multicast2=0xe0000002}}}, 0x84) 2033/05/18 03:35:28 executing program 5: r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = accept(r0, &(0x7f0000000580)=@rc, &(0x7f0000000280)=0x4c) syz_genetlink_get_family_id$ipvs(&(0x7f0000000300)='IPVS\x00') sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000100)={0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)=ANY=[@ANYBLOB='\x00\x00\x00\a'], 0x1}, 0x1, 0x0, 0x0, 0x20008004}, 0x20000000) setsockopt$SO_VM_SOCKETS_BUFFER_SIZE(r1, 0x28, 0x0, &(0x7f00000004c0)=0x100000001, 0x8) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(r2, &(0x7f0000000400)={&(0x7f0000000040)={0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000140)={0x1c, 0x20, 0x1, 0x0, 0x0, {0x4}, [@typed={0x8, 0x11, @pid=r3}]}, 0x1c}, 0x1}, 0x0) mmap(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x3, 0x1b071, 0xffffffffffffffff, 0x0) r4 = accept4$inet6(0xffffffffffffff9c, &(0x7f0000000180)={0x0, 0x0, 0x0, @remote}, &(0x7f00000001c0)=0x1c, 0x0) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r1, 0x84, 0x70, &(0x7f0000000600)={0x0, @in6={{0xa, 0x4e22, 0xfa5f, @ipv4={[], [0xff, 0xff]}, 0x6fa74d64}}, [0x40, 0xb27, 0x11a, 0x9, 0x5, 0x40c, 0x5, 0xffff, 0x9, 0x7, 0xfff, 0x4, 0x5b, 0x0, 0x4]}, &(0x7f0000000240)=0x100) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000500)={r5, 0x101}, &(0x7f0000000540)=0x8) tee(r4, 0xffffffffffffffff, 0x6bf081f2, 0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000200)={0xa, 0x3ff, 0x91f, 0xe134, 0x1a, 0xffffffffffffffff, 0x8}, 0x2c) r6 = socket$vsock_dgram(0x28, 0x2, 0x0) writev(r6, &(0x7f0000000140), 0x100002fb) r7 = socket$inet6(0xa, 0x0, 0x7fc) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={[], [0xff, 0xff]}}, 0x1c) listen(r7, 0x43) r8 = socket$inet6_sctp(0xa, 0x4000000000000001, 0x84) socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r8, &(0x7f0000966fe4)={0xa, 0x4e23, 0xfffffffffffffffd, @mcast1={0xff, 0x1, [], 0x1}, 0x6}, 0xe) setsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r7, 0x84, 0x13, &(0x7f0000edc000)=0x3, 0x4) sendto$inet6(r7, &(0x7f0000000140)='F', 0xff5d, 0x800000000, &(0x7f00000000c0)={0xa, 0x4e22, 0x7, @loopback={0x0, 0x1}}, 0x1c) sendmsg$netlink(r8, &(0x7f00009f3fc8)={0x0, 0x0, &(0x7f000070f000)=[{&(0x7f0000a77000)={0x2300}, 0x2300}], 0x1, &(0x7f0000414000)}, 0x0) accept4(r7, 0x0, &(0x7f0000da8ffc), 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080)='IPVS\x00') ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f0000000880)={0x2ce7, {0x2, 0x4e22, @multicast2=0xe0000002}, {0x2, 0x4e21, @loopback=0x7f000001}, {0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0xb}}, 0x4, 0xffffffffffffffff, 0x7, 0xffffffffffbff001, 0x0, 0x0, 0x5, 0x400000, 0x1}) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000800)=[@in6={0xa, 0x4e24, 0x18c4, @ipv4={[], [0xff, 0xff], @local={0xac, 0x14, 0x14, 0xaa}}, 0x8000000000}, @in6={0xa, 0x4e21, 0x20000000000000, @loopback={0x0, 0x1}, 0x80}, @in={0x2, 0x4e21, @local={0xac, 0x14, 0x14, 0xaa}}, @in={0x2, 0x4e23, @remote={0xac, 0x14, 0x14, 0xbb}}, @in6={0xa, 0x4e23, 0x9, @empty, 0x8}], 0x74) 2033/05/18 03:35:28 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) socket$inet6_udp(0xa, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) syz_open_dev$vcsa(&(0x7f00000005c0)='/dev/vcsa#\x00', 0x20, 0x2) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f00000006c0)={0x28, 0x0, 0xfffffffd, @my}, 0xad) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000ac0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:28 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = semget(0x3, 0x5, 0x331) semop(r1, &(0x7f0000000040)=[{0x2, 0x1ff, 0x1000}, {0x4, 0x1, 0x800}, {0x5156a8b60215b8f1, 0x2, 0x1800}], 0x3) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881", 0x2a, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 3: r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x240, 0x8) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100)=0x6, 0xc9e682c20bba2dd0) fdatasync(0xffffffffffffffff) socket$alg(0x26, 0x5, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0", 0x3f, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 3: ioctl$KVM_CREATE_DEVICE(0xffffffffffffffff, 0xc00caee0, &(0x7f0000000040)={0x7, 0xffffffffffffff9c, 0x1}) ioctl$GIO_UNISCRNMAP(r0, 0x4b69, &(0x7f0000000080)=""/63) sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) socket$inet6_udp(0xa, 0x2, 0x0) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 6: r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net\x00', 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)="6367726f75702e636c6f6e655f6368696c6472656e00b3c911184e1a2cf421b11d6eeef35851423c95fd650a1a797d1915691d8756ba8d47b93fb5d7dd474df0e3942079a992ee72443c5540a7acf908b972182820530448a2fb54e15f3d432da5f9edea258e21311b636f7c79a7be00b5c2cf2cecd8c1", 0x2, 0x0) pread64(r1, &(0x7f0000000300)=""/4096, 0x1000, 0x0) r2 = syz_open_dev$sg(&(0x7f0000000000)='/dev/sg#\x00', 0x401, 0x80040) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1f, &(0x7f00000001c0)={@remote, 0x0}, &(0x7f0000000200)=0x14) connect$can_bcm(r2, &(0x7f0000000240)={0x1d, r3}, 0x10) 2033/05/18 03:35:28 executing program 5: r0 = socket$l2tp(0x18, 0x1, 0x1) setsockopt$l2tp_PPPOL2TP_SO_REORDERTO(r0, 0x111, 0x5, 0xffffffffffbfffff, 0x4) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cgroup.stat\x00', 0x0, 0x0) ioctl$PERF_EVENT_IOC_ENABLE(r1, 0x2400, 0x80) 2033/05/18 03:35:28 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d80c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:28 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:28 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 5: socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000013c0)={0xa, 0x0, 0x8}, 0xffffffffffffff4c) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000380)='/dev/sequencer\x00', 0x80, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r0, 0xc4c85512, &(0x7f0000000400)={{0xfffffffffffffffa, 0x3, 0xfffffffffffffb49, 0x1, "df58e7128e8ea5eccabba0425b763dbf4f5e9619ec2569977d0073fcdfc26e5ea411d1b2f781968a2c41d55c", 0x4}, 0x6, [0x8001, 0x2, 0x7, 0x1, 0x905, 0xfffffffffffffffd, 0x7fffffff, 0x400, 0xfffffffffdfe5de8, 0x9, 0xfffffffffffffff7, 0x8, 0x0, 0x0, 0x6, 0x0, 0x3, 0x9, 0x4, 0x5, 0xeb6, 0x5, 0x3, 0x9, 0x5, 0xfffffffffffffff7, 0x7, 0xff, 0x2, 0x0, 0x7, 0x800, 0x1, 0x5, 0x1, 0x4, 0x6, 0x9632, 0xb0, 0x100000000000, 0x3, 0x8, 0x3, 0x9, 0x1, 0x6, 0x9, 0x9, 0x2, 0x80, 0x21e, 0x8000, 0x6, 0x8000, 0x5, 0x5, 0x4, 0x4, 0x6, 0x3, 0x1, 0x2, 0x100, 0x3ff, 0xffffffffffffffc1, 0xffffffffffffffff, 0x14000000, 0x3c2c, 0x3ff, 0x100000000, 0x80000001, 0x2, 0x3, 0x7ff, 0x200, 0xfff, 0x8, 0x4, 0xfffffffffffffffd, 0xff, 0x33c9, 0x6, 0x100, 0x1, 0x3, 0x7fffffff, 0x3f, 0x1, 0x81, 0x8000, 0x1, 0x6, 0xfff, 0x4, 0x8, 0x9, 0x0, 0x3f, 0x401, 0x9, 0xfe7, 0x3, 0xfffffffffffff97e, 0x4, 0x10000, 0x200, 0x9, 0xfc, 0x7, 0x8, 0x558, 0xffff, 0xfff, 0x9, 0x1, 0x10000, 0x40000000000000, 0x9, 0x5, 0x80000001, 0x3cd3, 0x2, 0x8, 0x5, 0x9, 0x1, 0x7, 0x80000001]}) socket$packet(0x11, 0x2, 0x300) r1 = syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) syz_open_dev$tun(&(0x7f00000001c0)='/dev/net/tun\x00', 0x0, 0x0) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x8941, &(0x7f0000000140)=@get={0x1, &(0x7f0000000200)=""/224}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0xfffffffffffffffd}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'bridge0\x00', 0x1ffd}) r2 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000080)={'bridge0\x00'}) r5 = socket(0x10, 0x803, 0x0) ioctl$PERF_EVENT_IOC_ID(r3, 0x80082407, &(0x7f0000000180)) write(r5, &(0x7f0000df8fd9)="2600000026004701050007008980e8ff06006d20002b1f00c0e9ff094a51f10101c7033500b0", 0x26) ioctl$DRM_IOCTL_AGP_ALLOC(0xffffffffffffffff, 0xc0206434, &(0x7f0000000040)={0x6bca9da2, 0x0, 0x0, 0xfffffffffffffe01}) ioctl$DRM_IOCTL_AGP_BIND(0xffffffffffffffff, 0x40106436, &(0x7f00000000c0)) ioctl$TUNGETSNDBUF(r4, 0x800454d3, &(0x7f0000000300)) ioctl$DRM_IOCTL_AGP_INFO(r0, 0x80386433, &(0x7f0000000900)=""/10) mmap(&(0x7f0000000000/0xe6f000)=nil, 0xe6f000, 0x3, 0x10, 0xffffffffffffffff, 0x0) pselect6(0x40, &(0x7f0000001180)={0xffffffff, 0x1d25, 0x6, 0x0, 0x10000, 0x0, 0x55, 0x7}, &(0x7f00000011c0)={0x80000000, 0xffffffffffffffc1, 0x6, 0x0, 0x0, 0x39, 0x8b}, &(0x7f0000001200)={0x4, 0x0, 0xb8, 0x101, 0x1ff, 0x6, 0x1, 0xffffffffffffffe0}, &(0x7f00000012c0)={0x77359400}, &(0x7f0000001340)={&(0x7f0000001300)={0xffffffffffffff00}, 0x8}) openat$ppp(0xffffffffffffff9c, &(0x7f0000000100)='/dev/ppp\x00', 0x1ffc, 0x0) sched_setaffinity(0x0, 0xfd86, &(0x7f00000003c0)=0x1) 2033/05/18 03:35:28 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0", 0x3f, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:28 executing program 6: r0 = openat$audio(0xffffffffffffff9c, &(0x7f0000000180)='/dev/audio\x00', 0x200000000008000, 0x0) write$eventfd(0xffffffffffffffff, &(0x7f00000001c0), 0xffffffffffffffa6) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000d7c000)) socket$inet_udp(0x2, 0x2, 0x0) ioctl$VHOST_NET_SET_BACKEND(0xffffffffffffffff, 0x4008af30, &(0x7f0000000040)) r1 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$TIOCGPGRP(r0, 0x540f, &(0x7f0000000140)) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f00000000c0)) r2 = getpgrp(0x0) r3 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000180)='/dev/hwrng\x00', 0xc0001, 0x0) ioctl$RNDCLEARPOOL(r3, 0x5206, &(0x7f00000002c0)=0x7) splice(r1, &(0x7f0000000080), 0xffffffffffffffff, &(0x7f0000002dc0), 0x8, 0x2) sched_getaffinity(0x0, 0x6e84f782, &(0x7f0000002e00)) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00001bb000)='/dev/ppp\x00', 0x0, 0x0) ioctl$EVIOCGPROP(r4, 0xc004743e, &(0x7f00000001c0)=""/246) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000380)) ioctl$EVIOCGREP(0xffffffffffffffff, 0x4004743c, &(0x7f00001bbf52)=""/174) close(r4) process_vm_writev(r2, &(0x7f0000001a80)=[{&(0x7f0000000400)=""/112, 0x70}, {&(0x7f0000000480)=""/187, 0xbb}, {&(0x7f0000000540)=""/247, 0xf7}, {&(0x7f0000000640)=""/174, 0xae}, {&(0x7f0000000700)=""/67, 0x43}, {&(0x7f0000000780)=""/172, 0xac}, {&(0x7f0000000840)=""/134, 0x86}, {&(0x7f0000000900)=""/131, 0x83}, {&(0x7f0000000a80)=""/4096, 0x1000}], 0x9, &(0x7f0000002d80)=[{&(0x7f0000001b40)=""/4096, 0x1000}, {&(0x7f0000002b40)=""/154, 0x9a}, {&(0x7f0000002c00)=""/211, 0xd3}, {&(0x7f0000002d00)=""/90, 0x5a}], 0x4, 0x0) ioctl$int_in(0xffffffffffffffff, 0x5473, &(0x7f0000000100)=0xc98) r5 = openat$audio(0xffffffffffffff9c, &(0x7f0000001140)='/dev/audio\x00', 0x0, 0x0) socketpair$ipx(0x4, 0x2, 0x0, &(0x7f0000000300)) close(0xffffffffffffffff) r6 = syz_open_dev$vcsn(&(0x7f0000000040)='/dev/vcs#\x00', 0x7, 0x0) ioctl$VHOST_SET_FEATURES(0xffffffffffffffff, 0x4008af00, &(0x7f0000000000)) connect$l2tp(r5, &(0x7f0000000080)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e21, @multicast2=0xe0000002}, 0x2, 0x2, 0x2, 0x2}}, 0x12) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f00000003c0)) move_pages(0x0, 0x2, &(0x7f0000000000)=[&(0x7f00007d0000/0x1000)=nil, &(0x7f0000fae000/0x4000)=nil], &(0x7f000026bfec), &(0x7f0000002000), 0x0) ioctl$PERF_EVENT_IOC_PERIOD(r6, 0x40082404, &(0x7f0000000340)) 2033/05/18 03:35:28 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) ioctl$KVM_UNREGISTER_COALESCED_MMIO(r2, 0x4010ae68, &(0x7f0000000000)={0xd000, 0x5000}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my}, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d077e9ff1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000fc0)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000800)={0x0, 0xb2, "acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3cc20b95f3e25a0524fca528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0ef4cd3bf175a5d842b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f555e1c762ecd4f0535ab78433c25e85"}, &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000440)={'bcsh0\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0xfffffffffffffe6c) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:28 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="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"]}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678ba80a8d4"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x0, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:28 executing program 3: socket$packet(0x11, 0x3, 0x300) r0 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000080)='/dev/vga_arbiter\x00', 0x400000, 0x0) ioctl$GIO_CMAP(r0, 0x4b70, &(0x7f00000000c0)) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x84800) ioctl$KDGKBSENT(r1, 0x4b48, &(0x7f0000000100)={0x7, 0x3, 0x401}) ioctl$VT_RESIZE(r1, 0x5609, &(0x7f0000000380)={0x1000, 0x0, 0x40}) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$DRM_IOCTL_RES_CTX(r2, 0xc0106426, &(0x7f00000002c0)={0x2, &(0x7f0000000280)=[{}, {0x0}]}) ioctl$DRM_IOCTL_UNLOCK(r0, 0x4008642b, &(0x7f0000000300)={r3}) ioctl$sock_bt_hidp_HIDPCONNDEL(r2, 0x400448c9, &(0x7f0000000200)={{0xff6d, 0x3, 0x4, 0xffff, 0x1, 0x5b}, 0x6}) sendto$inet6(r1, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0x81}, 0x1c) fstat(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$TCSETSW(r0, 0x5403, &(0x7f0000000340)={0x1, 0x1ff, 0x1, 0x0, 0x7fffffff, 0x21cf, 0x6, 0x1, 0x1bc, 0x6, 0x7fff, 0x7fff}) setsockopt$inet6_tcp_int(r1, 0x6, 0x1f, &(0x7f00000003c0)=0x1, 0x4) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffff9c, 0x541b, &(0x7f0000000240)) ioprio_get$uid(0x3, r4) setsockopt$inet_dccp_int(r2, 0x21, 0xb, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) 2033/05/18 03:35:29 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:29 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0", 0x3f, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) [ 185.340233] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. 2033/05/18 03:35:29 executing program 3: socketpair$inet_sctp(0x2, 0x5, 0x84, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f00000001c0)={0x0, @in={{0x2, 0x4e24, @multicast1=0xe0000001}}, 0xfffffffffffffffd, 0x8}, &(0x7f0000000280)=0x90) r3 = accept4(r0, &(0x7f00000002c0)=@pppol2tpv3in6={0x0, 0x0, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, @ipv4={[], [], @multicast2}}}}, &(0x7f0000000340)=0x80, 0x800) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r3, 0x84, 0x1, &(0x7f0000000380)={r2, 0xffff, 0x4, 0xffffffffffffff01, 0xb, 0x4}, &(0x7f0000000140)=0x14) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180)={r4, 0x2e1, 0x30}, 0xc) r5 = socket$packet(0x11, 0x2, 0x300) sendto$inet6(r5, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}, 0xba1}, 0x1c) r6 = syz_open_dev$dmmidi(&(0x7f0000000040)='/dev/dmmidi#\x00', 0xfff, 0x802) setsockopt$netlink_NETLINK_LISTEN_ALL_NSID(r6, 0x10e, 0x8, &(0x7f0000000080)=0x9, 0x4) 2033/05/18 03:35:29 executing program 6: r0 = syz_open_dev$binder(&(0x7f0000001000)='/dev/binder#\x00', 0xffffffffffffffff, 0x0) r1 = socket(0x10000000005, 0xa, 0x0) r2 = syz_open_dev$admmidi(&(0x7f00000000c0)='/dev/admmidi#\x00', 0x2, 0x80000) ioctl$FIONREAD(r2, 0x541b, &(0x7f0000000100)) getsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000040), &(0x7f0000000080)=0x4) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x20011, r0, 0x0) madvise(&(0x7f0000001000/0x1000)=nil, 0x1000, 0xb) openat$autofs(0xffffffffffffff9c, &(0x7f0000000140)='/dev/autofs\x00', 0x400000, 0x0) clone(0x0, &(0x7f0000000080), &(0x7f0000000200), &(0x7f0000000000), &(0x7f00000000c0)) 2033/05/18 03:35:29 executing program 3: sendto$inet6(0xffffffffffffffff, &(0x7f00000001c0), 0xfffffffffffffff6, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) acct(0x0) r0 = open(&(0x7f0000000040)='./file0\x00', 0x10000, 0xa1) getsockname$inet6(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, @loopback}, &(0x7f00000000c0)=0x1c) [ 185.408446] netlink: 2 bytes leftover after parsing attributes in process `syz-executor5'. 2033/05/18 03:35:29 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:29 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c4", 0x49, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:29 executing program 2: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b"]}) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x14, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:29 executing program 3: r0 = socket$packet(0x11, 0x2, 0x300) r1 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040)='/dev/mixer\x00', 0x0, 0x0) setsockopt$l2tp_PPPOL2TP_SO_DEBUG(r1, 0x111, 0x1, 0x101, 0x4) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast2={0xff, 0x2, [], 0x1}}, 0x1c) 2033/05/18 03:35:29 executing program 1: r0 = signalfd4(0xffffffffffffff9c, &(0x7f00000002c0)={0x5}, 0x8, 0x9107e081c60366cf) preadv(r0, &(0x7f0000000400)=[{&(0x7f0000000300)=""/93, 0x5d}], 0x1, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0)='/dev/kvm\x00', 0x0, 0x0) ioctl$SIOCGIFMTU(0xffffffffffffffff, 0x8921, &(0x7f0000000140)) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_CREATE_PIT2(r2, 0x4040ae77, &(0x7f0000000180)={0x6}) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) r3 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r3, &(0x7f0000000100)={0x28, 0x0, 0x0, @hyper}, 0x10) r4 = syz_open_dev$vcsn(&(0x7f0000000580)='/dev/vcs#\x00', 0x435, 0x5) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r4, 0xc01064b5, &(0x7f0000000280)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], 0x4}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) utime(&(0x7f0000000200)='./file0\x00', &(0x7f0000000540)={0x1, 0x5a0}) ioctl$LOOP_CTL_GET_FREE(r4, 0x4c82) r6 = syz_open_dev$dspn(&(0x7f0000000040)='/dev/dsp#\x00', 0x40, 0x0) r7 = fcntl$dupfd(r1, 0x0, r4) connect$vsock_stream(r6, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0xfffffffffffffc9b) syz_genetlink_get_family_id$ipvs(&(0x7f0000000900)='IPVS\x00') sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f0000000a80)={&(0x7f0000000640)={0x10}, 0xc, &(0x7f0000000a40)={&(0x7f0000000c00)=ANY=[@ANYBLOB="7d5f9488d6524f95de493405ddbcfee0d994b59d07fc09f1313daa01bcdaf1ab99fdd259dcabd3540e48e4c9bbf2603f6eec94cf7c80385558539030c070de688606351a30b55fd49023eab658bf30a2516d9c939db50d24a88049c7fbbb8907fdb95c7b16f99a54", @ANYBLOB="a4882dbd7000fbdbdf250300000058000100080004004e2200000800010002000000080008000101000008000800fdffffff0800090046000000080005000000000014000300ff020000000000000000000000000001080004004e240000080004004e2000004c0001000c0007002c00000030000000080004004e210000080001000a000000080004004e220000080004004e210000080001000a00000014000300ac1414bb0000000000000000000000001400020008000b00020000000800070000000000080004000000000008000400a4000000"], 0x2}, 0x1, 0x0, 0x0, 0x4004090}, 0x800) accept4$packet(r4, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000480)=0x14, 0x80000) getsockopt$netlink(r6, 0x10e, 0x7, &(0x7f00000005c0)=""/69, &(0x7f0000000680)=0x45) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r7, 0x84, 0x6d, &(0x7f0000000d40)=ANY=[@ANYRES32=0x0, @ANYBLOB="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"], &(0x7f0000000780)=0x2) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r4, 0x84, 0x6c, &(0x7f0000000940)=ANY=[@ANYRES32=0x0, @ANYBLOB="b2000000acf0177cb1103d2ad0e2d48808d30f0f82071533119b19975f859a7414ce1fd3528f38c2e093001c1970add7c1b99fcd280a664b23cecb03600cc913932a13db86cb30d63b5e495626061fab48b648bf421cb099074b07c0cb2a8fee69450c7fe191e5e72d53d32b89963d17860eef7b107410a9eb5a0e0700000000000000b7c495f79a7caf0c66c3609cdc15a44192d632c0ab4ee99597f51d7c5e664421cea3a19455e1c762ecd4f0535ab78433c25e85"], &(0x7f00000008c0)=0xba) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f00000007c0)={r9, 0xff}, 0x3b7) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syz_tun\x00', r8}) r10 = dup2(r1, r5) dup3(r1, r2, 0x80000) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r6, 0x10e, 0x1, &(0x7f00000006c0)=0x13, 0x4) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r4, 0x84, 0x72, &(0x7f0000000380)={0x0, 0x2}, &(0x7f00000003c0)=0xffffffffffffffc0) setsockopt$inet_sctp6_SCTP_CONTEXT(r10, 0x84, 0x11, &(0x7f0000000500)={r11, 0x6}, 0x8) 2033/05/18 03:35:29 executing program 0: ioctl$int_in(0xffffffffffffffff, 0x0, &(0x7f0000000240)) r0 = add_key$keyring(&(0x7f0000000040)='keyring\x00', &(0x7f0000000080)={0x73, 0x79, 0x7a, 0x3}, 0x0, 0x0, 0xfffffffffffffffb) r1 = add_key$user(&(0x7f00000002c0)='user\x00', &(0x7f0000000200)={0x73, 0x79, 0x7a, 0x0}, &(0x7f00000000c0), 0x0, r0) keyctl$set_timeout(0xf, r1, 0x0) r2 = syz_open_dev$mouse(&(0x7f0000000000)='/dev/input/mouse#\x00', 0xfffffffffffffffd, 0x8882) ioctl$KVM_CREATE_DEVICE(r2, 0xc00caee0, &(0x7f0000000180)={0x3, r2, 0x1}) r4 = socket(0x0, 0x2, 0x0) r5 = socket(0x0, 0x2, 0x0) bind(0xffffffffffffffff, &(0x7f0000000340)=@generic={0x0, "0103000000000500ffffffffffffffe409a979f321b30c7bc8790405c7bad62e0a43a632ed4938d36d73fb8f84b9a3ff59829a2b0afe7ce43a4b2470a0c5216669ca021f6f65dcf160e7e58f358c0002f0000158d19bcb31f131668ef151622ca5bdb9c8ead2000077aeb81c90001d6d7c980ee590c801f70dc136cb184a"}, 0xffffffffffffff41) unshare(0x60000000) getuid() getgid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000e00), &(0x7f0000000e40)=0xc) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000000)=0xffffffffffffff25) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000001100)={{{@in6=@local, @in=@multicast2}}, {{@in6}, 0x0, @in=@loopback}}, &(0x7f0000001200)=0xe8) gettid() getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000500), &(0x7f0000000700)=0xc) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000001c0)) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000000180)) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000001480)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000014c0), &(0x7f0000001500)=0xc) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r6, 0x8946, &(0x7f0000000180)={'\x00', &(0x7f00000005c0)=ANY=[@ANYBLOB="4f00d4250d6a00a000ae00052000daf7ffffff060000000004090305000000ff03b965090311d0793563202930197175fa9e26b888b975d220d6be48360daf941f725c1eaff25b9f6b8dd3d0e802db648f78da9a7ec07f8faef52369df4dad76c3bbef9b00000077a8f08394b2f947f1d1497eebf267a3733d0029c1520400f703000000f1bdd06ab5dea2a39f0fed3460189f993db50a724ccbeb5affcb93d1fededb957c4c593eaaaa7df0a55f7085c2068ecf000000000000000000000000000077ea54fb9d5d0c525e15890000000000000000e48c303331f7ea6fb50000007afe254bdb63fb8d79022134cfffa35f41029f018eed8469555f02febad3f1b8be904b134f4f0f93505ad9d5def25678ba80a8d4"]}) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCGARP(r6, 0x8954, &(0x7f0000000400)={{0x2, 0x4e23, @rand_addr=0x8000}, {0x0, @random="04d8d2a5efdf"}, 0x0, {0x2, 0x4e24, @multicast2=0xe0000002}, 'bridge0\x00'}) accept4$ax25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000480)=0xffffff16, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r5, 0x28, 0x2, &(0x7f0000000280)=0x8, 0xffffffffffffffb5) getsockopt$IPT_SO_GET_INFO(r5, 0x0, 0x40, &(0x7f0000000780)={'security\x00'}, &(0x7f00000003c0)=0x312) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000080)=""/133, 0x85, 0x101, &(0x7f0000000300)={0x3, {"ddf6d4b4097ce5"}, 0x1ff000}, 0x10) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r3, 0x84, 0xc, &(0x7f0000000140)=0x4e, 0xffffffffffffff12) 2033/05/18 03:35:29 executing program 6: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000013000)={0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000002fe8)=[{0x1d, 0x0, 0x4000000000401}, {0xc2, 0x3ff}, {0x6c42}]}, 0xffffffcc) r1 = dup(r0) r2 = add_key$user(&(0x7f0000000000)='user\x00', &(0x7f00000000c0)={0x73, 0x79, 0x7a, 0x0}, &(0x7f0000000280)="50944a157662d95b42e3dbd3b3959051d41d31014cfe334a20771dc1cb48ef3757a612fdf03f932d5062f79ce3d79a770c422ec2ad5be70a3cdda7e415fe89066d41a5adf9f210f1b967055527acde9726b5ba18f25887267e80c48e29320754211158b5ea27bf178cce155464d2470064", 0x71, 0x0) keyctl$set_timeout(0xf, r2, 0x9) sendmsg$FOU_CMD_GET(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000003000000710c4f20864a80b0fcb282cab60900d91a923cda20b13eb944dd899acb23b1f2a5b0edc0d3ef9c9b47c4b0a565633945d48993f3d6ea4272991a4a66d078167ea47fb2a38201ed944944f32c9f989dc0db0000000001000000852fe4dd15558738b8d922302883391fe1bc2a2857e455eb10b796c0457c4f280fde06dcf15f954b94dd9749907ff5af16a8438830a9d5e4fa3dc2033139392cca9962a246f5"], 0x14}, 0x1}, 0x0) 2033/05/18 03:35:29 executing program 5: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) getsockopt$sock_timeval(r0, 0x1, 0x0, &(0x7f0000000000), &(0x7f0000000040)=0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000133ffc)="71e67a15", 0x4) 2033/05/18 03:35:29 executing program 4: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c480347859f1c6e1960069", 0x53, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:29 executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) sendto$inet6(r0, &(0x7f00000001c0), 0x0, 0x0, &(0x7f0000000000)={0xa, 0x800, 0x7, @mcast1={0xff, 0x1, [], 0x1}}, 0x1c) pipe(&(0x7f00000000c0)={0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffff9c, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x3ff, 0xfffffffffffffff8, 0x1f, 0x0, 0x6}, &(0x7f0000000140)=0x14) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x18, &(0x7f0000000180)={r2, 0x6f}, &(0x7f00000001c0)=0x8) r3 = getpid() timer_create(0x6, &(0x7f0000000200)={0x0, 0x41, 0x2, @tid=r3}, &(0x7f0000000080)) 2033/05/18 03:35:29 executing program 6: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x1, @broadcast=[0xff, 0xff, 0xff, 0xff, 0xff, 0xff], 'ip6_vti0\x00'}}, 0x1e) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000040)='+', 0x1}], 0x1) 2033/05/18 03:35:29 executing program 7: pipe2(&(0x7f0000f61000)={0xffffffffffffffff}, 0x0) ioctl$VHOST_SET_LOG_BASE(r0, 0x4008af04, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x10) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000640)="13e8efde3bcdd8beb83ea73ba3bb26f965647a31fd21182fc3fe1bebe75064e67c195f17620d246cc118c7e9390ee5bb8756ac1f9773d1b8802e0c9444ef92235e0cdc37facd84da1141202522c64ca129f759bbe5629c935354f5de140d3ec7c4e7b523be780622eacfe00bde4c8c427911ad6f6b7f0446ce", 0x79}], 0x1) eventfd2(0x0, 0x0) r1 = getpid() sched_setattr(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x3}, 0x0) mkdir(&(0x7f000082f000)='./control\x00', 0x0) mmap(&(0x7f0000011000/0x3000)=nil, 0x3000, 0x1, 0x32, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f0000e4c000)={0xaa}) syz_open_dev$amidi(&(0x7f0000000d00)='/dev/amidi#\x00', 0x0, 0x4101) r2 = syz_open_dev$sndseq(&(0x7f0000000480)='/dev/snd/seq\x00', 0x0, 0x0) openat$rtc(0xffffffffffffff9c, &(0x7f0000000200)='/dev/rtc\x00', 0x40, 0x0) ioctl$SNDRV_SEQ_IOCTL_DELETE_QUEUE(r2, 0x408c5333, &(0x7f00000004c0)={0x7, 0x8, 0x200000000005, "717565756530000000000000000000000000000000000000000040000000000000000000000000f3ffffffffffffff0000000016000000003c00000000000100", 0x1}) mknod$loop(&(0x7f0000000040)='./file0\x00', 0x0, 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0xf) syz_open_dev$vcsa(&(0x7f00000002c0)='/dev/vcsa#\x00', 0xfffffffffffffffd, 0x2000) setns(0xffffffffffffffff, 0xfffffffffffffffe) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280)='/dev/sequencer\x00', 0x0, 0x0) sendto$ipx(r4, &(0x7f0000000300)="62ab46350b508045808b35f60f3ab807f050a308f4a59f24c3cf2311d0967b5ab6ecf688830952fd1881851c008e3ac13f0728c4fdf3fc94dc08e5b41a09c0977defb5a812e59127c4", 0x49, 0x20040000, 0x0, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0x2, &(0x7f0000000000), 0xfffffffffffffddc) setxattr(&(0x7f0000000080)='./file0\x00', &(0x7f00000001c0)=@known='trusted.syz\x00', &(0x7f0000000100)='/vmnet0\x00', 0x11f, 0x0) unlink(&(0x7f0000000580)='./file0\x00') getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000000b40)={'IDLETIMER\x00'}, &(0x7f0000000b80)=0x1e) setsockopt$IP_VS_SO_SET_STARTDAEMON(0xffffffffffffffff, 0x0, 0x48b, &(0x7f0000000240)={0x2}, 0x18) lsetxattr(&(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)=@known='trusted.syz\x00', &(0x7f0000000440)='/dev/sequencer\x00', 0xf, 0x0) accept$alg(r4, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000006c0)=ANY=[@ANYBLOB="6e000010000000000000800000000000001b001000400400003802000028010000ffffffff00060011e8030000e8030000e8030000ffffffffe803123508070000e892dbb135936e391285539af6eb294be8235164b438721a00000000000000"], 0x1) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000003800)='/dev/loop-control\x00', 0x0, 0x0) ioctl$DRM_IOCTL_GEM_OPEN(0xffffffffffffffff, 0xc010640b, &(0x7f0000000040)={0x0, 0x0, 0x80000000}) 2033/05/18 03:35:29 executing program 5: r0 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000)='/dev/cuse\x00', 0x82000, 0x0) ioctl$LOOP_SET_STATUS(r0, 0x4c02, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x1000, 0xd, 0x0, 0x1, "5c4cb34d3d582dd169235171ab0582bfd57e51b1774ae9bf57e38bb698db77361872fa252f98f53e35ba18a7312c4a9de4de339163582a796f8aa1d6c78772d5", "4302df0282159452e161582cdd74258bd488f31025b228c2377273d98424c3a4", [0x100000, 0x9]}) sendmsg$nl_generic(r0, &(0x7f00000002c0)={&(0x7f0000000200)={0x10}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x20, 0x2b, 0x200, 0x70bd2b, 0x25dfdbfb, {0x1b}, [@typed={0xc, 0x6a, @u64=0x5}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x8804) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x73, &(0x7f0000000040)={0x0, 0x3, 0x30, 0xd2, 0x9}, &(0x7f0000000180)=0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x22, &(0x7f00000001c0)={0x101, 0x1, 0x4, 0x7, r1}, 0x10) setsockopt$kcm_KCM_RECV_DISABLE(0xffffffffffffffff, 0x119, 0x1, &(0x7f0000000080), 0x3) socket$kcm(0x29, 0x7, 0x0) [ 185.614566] protocol 0800 is buggy, dev ip6_vti0 [ 185.620136] ================================================================== [ 185.627824] BUG: KASAN: use-after-free in _decode_session4+0x15f0/0x1990 [ 185.634670] Read of size 1 at addr ffff8801c1a0fb18 by task syz-executor3/27178 [ 185.642111] [ 185.643744] CPU: 0 PID: 27178 Comm: syz-executor3 Not tainted 4.16.0-rc7+ #6 [ 185.650945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 185.660302] Call Trace: 2033/05/18 03:35:29 executing program 6: sched_setattr(0x0, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x0, 0x4}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000)='/dev/ptmx\x00', 0x0, 0x0) r1 = syz_open_dev$dmmidi(&(0x7f00000002c0)='/dev/dmmidi#\x00', 0x7, 0x300) setsockopt$inet_sctp_SCTP_RECVRCVINFO(r1, 0x84, 0x20, &(0x7f0000000300), 0x4) readv(r0, &(0x7f00003fd000)=[{&(0x7f00000001c0)=""/255, 0xff}], 0x1) ioctl$TCSETS(r0, 0x40045431, &(0x7f00003b9fdc)) r2 = syz_open_pts(r0, 0x0) dup3(r0, r2, 0x0) r3 = mq_open(&(0x7f0000000000)='-$\x00', 0x6e93ebbbcc0884f2, 0x0, &(0x7f0000664fc0)={0x0, 0x5, 0x2, 0x0, 0x0, 0xfffffffffffffffd}) mq_timedreceive(r3, &(0x7f0000000040)=""/97, 0x61, 0x0, 0x0) mq_timedsend(r3, &(0x7f0000000040), 0x0, 0x0, 0x0) [ 185.662889] dump_stack+0x194/0x24d [ 185.666522] ? arch_local_irq_restore+0x53/0x53 [ 185.671190] ? show_regs_print_info+0x18/0x18 [ 185.675692] ? _decode_session4+0x15f0/0x1990 [ 185.680185] print_address_description+0x73/0x250 [ 185.685622] ? _decode_session4+0x15f0/0x1990 [ 185.685713] kasan_report+0x23c/0x360 [ 185.685731] __asan_report_load1_noabort+0x14/0x20 [ 185.685739] _decode_session4+0x15f0/0x1990 [ 185.685770] __xfrm_decode_session+0x68/0x110 [ 185.685784] vti6_tnl_xmit+0x36d/0x1820 [ 185.685794] ? dev_queue_xmit_nit+0x9b0/0xc40 [ 185.685806] ? trace_hardirqs_off+0x10/0x10 [ 185.685821] ? vti6_ioctl+0x940/0x940 [ 185.685858] dev_hard_start_xmit+0x24e/0xac0 [ 185.685866] ? SYSC_sendto+0x361/0x5c0 [ 185.685883] ? validate_xmit_skb_list+0x120/0x120 [ 185.685902] ? lock_acquire+0x1d5/0x580 [ 185.685907] ? lock_acquire+0x1d5/0x580 [ 185.685913] ? __dev_queue_xmit+0x2781/0x2fc0 [ 185.685921] ? __dev_queue_xmit+0x2fe/0x2fc0 [ 185.685933] ? lock_release+0xa40/0xa40 [ 185.685940] ? validate_xmit_skb+0x512/0xb00 [ 185.685954] ? netif_skb_features+0x9b0/0x9b0 [ 185.685981] __dev_queue_xmit+0x26bf/0x2fc0 [ 185.686010] ? netdev_pick_tx+0x2c0/0x2c0 [ 185.686020] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 185.686032] ? __sched_text_start+0x8/0x8 [ 185.686052] ? print_irqtrace_events+0x270/0x270 [ 185.686069] ? trace_hardirqs_off+0x10/0x10 [ 185.686089] ? refcount_add_not_zero+0x133/0x200 [ 185.686099] ? refcount_dec_if_one+0x20/0x20 [ 185.686122] ? refcount_add+0x24/0x60 [ 185.686135] ? skb_set_owner_w+0x232/0x330 [ 185.686150] ? sock_alloc_send_pskb+0x6ba/0x9b0 [ 185.686179] ? sock_wmalloc+0x1d0/0x1d0 [ 185.686199] ? dev_get_by_index+0xbf/0x170 [ 185.686210] ? lock_downgrade+0x980/0x980 [ 185.686227] ? __dev_get_by_index+0x1a0/0x1a0 [ 185.686236] ? cap_capable+0x1b5/0x230 [ 185.686256] ? security_capable+0x8e/0xc0 [ 185.686277] dev_queue_xmit+0x17/0x20 [ 185.686286] ? dev_queue_xmit+0x17/0x20 [ 185.848460] packet_sendmsg+0x3aed/0x60b0 [ 185.848478] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 185.857813] ? find_held_lock+0x35/0x1d0 [ 185.861884] ? clockevents_exchange_device+0x2e8/0x4e0 [ 185.867163] ? packet_cached_dev_get+0x2b0/0x2b0 [ 185.871919] ? __lock_is_held+0xb6/0x140 [ 185.876001] ? trace_hardirqs_off+0x10/0x10 [ 185.880326] ? iterate_fd+0x3f0/0x3f0 [ 185.884120] ? debug_mutex_init+0x1c/0x60 [ 185.888264] ? find_held_lock+0x35/0x1d0 [ 185.892327] ? __might_fault+0x110/0x1d0 [ 185.896379] ? lock_downgrade+0x980/0x980 [ 185.900521] ? lock_release+0xa40/0xa40 [ 185.904491] ? check_same_owner+0x320/0x320 [ 185.908808] ? __check_object_size+0x8b/0x530 [ 185.913329] ? security_socket_sendmsg+0x89/0xb0 [ 185.918087] ? packet_cached_dev_get+0x2b0/0x2b0 [ 185.922849] sock_sendmsg+0xca/0x110 [ 185.926561] SYSC_sendto+0x361/0x5c0 [ 185.930270] ? SYSC_connect+0x4a0/0x4a0 [ 185.934231] ? get_unused_fd_flags+0x190/0x190 [ 185.938794] ? alloc_file+0x27e/0x390 [ 185.942572] ? _raw_spin_unlock+0x22/0x30 [ 185.946699] ? sock_alloc_file+0x2a6/0x560 [ 185.950920] ? __alloc_fd+0x750/0x750 [ 185.954696] ? __might_sleep+0x95/0x190 [ 185.958656] ? SyS_futex+0x269/0x390 [ 185.962343] ? fd_install+0x4d/0x60 [ 185.965950] ? do_futex+0x22a0/0x22a0 [ 185.969731] ? SyS_socket+0x12d/0x1d0 [ 185.973509] ? move_addr_to_kernel+0x60/0x60 [ 185.977898] SyS_sendto+0x40/0x50 [ 185.981327] ? SyS_getpeername+0x30/0x30 [ 185.985365] do_syscall_64+0x281/0x940 [ 185.989227] ? __do_page_fault+0xc90/0xc90 [ 185.993436] ? _raw_spin_unlock_irq+0x27/0x70 [ 185.997906] ? finish_task_switch+0x1c1/0x7e0 [ 186.002382] ? syscall_return_slowpath+0x550/0x550 [ 186.007288] ? syscall_return_slowpath+0x2ac/0x550 [ 186.012193] ? prepare_exit_to_usermode+0x350/0x350 [ 186.017187] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 186.022533] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.027361] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.032525] RIP: 0033:0x4548b9 [ 186.035688] RSP: 002b:00007ff614e1ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.043371] RAX: ffffffffffffffda RBX: 00007ff614e1b6d4 RCX: 00000000004548b9 [ 186.050617] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000016 [ 186.057861] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 186.065108] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 186.072353] R13: 00000000000004f3 R14: 00000000006f9768 R15: 0000000000000000 [ 186.079617] [ 186.081229] Allocated by task 27178: [ 186.084920] save_stack+0x43/0xd0 [ 186.088348] kasan_kmalloc+0xad/0xe0 [ 186.092039] __kmalloc_node_track_caller+0x47/0x70 [ 186.096943] __kmalloc_reserve.isra.39+0x41/0xd0 [ 186.101672] __alloc_skb+0x13b/0x780 [ 186.105361] alloc_skb_with_frags+0x10d/0x750 [ 186.109829] sock_alloc_send_pskb+0x787/0x9b0 [ 186.114301] packet_sendmsg+0x1ece/0x60b0 [ 186.118422] sock_sendmsg+0xca/0x110 [ 186.122112] SYSC_sendto+0x361/0x5c0 [ 186.125800] SyS_sendto+0x40/0x50 [ 186.129228] do_syscall_64+0x281/0x940 [ 186.133091] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.138250] [ 186.139852] Freed by task 27178: [ 186.143193] save_stack+0x43/0xd0 [ 186.146622] __kasan_slab_free+0x11a/0x170 [ 186.150830] kasan_slab_free+0xe/0x10 [ 186.154603] kfree+0xd9/0x260 [ 186.157683] skb_free_head+0x74/0xb0 [ 186.161370] skb_release_data+0x58c/0x790 [ 186.165494] skb_release_all+0x4a/0x60 [ 186.169354] consume_skb+0x153/0x490 [ 186.173044] packet_rcv+0x15b/0x16c0 [ 186.176735] dev_queue_xmit_nit+0x866/0xc40 [ 186.181034] dev_hard_start_xmit+0x16b/0xac0 [ 186.185418] __dev_queue_xmit+0x26bf/0x2fc0 [ 186.189739] dev_queue_xmit+0x17/0x20 [ 186.193517] packet_sendmsg+0x3aed/0x60b0 [ 186.197641] sock_sendmsg+0xca/0x110 [ 186.201328] SYSC_sendto+0x361/0x5c0 [ 186.205022] SyS_sendto+0x40/0x50 [ 186.208458] do_syscall_64+0x281/0x940 [ 186.212324] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.217485] [ 186.219090] The buggy address belongs to the object at ffff8801c1a0fa00 [ 186.219090] which belongs to the cache kmalloc-512 of size 512 [ 186.231740] The buggy address is located 280 bytes inside of [ 186.231740] 512-byte region [ffff8801c1a0fa00, ffff8801c1a0fc00) [ 186.243593] The buggy address belongs to the page: [ 186.248497] page:ffffea00070683c0 count:1 mapcount:0 mapping:ffff8801c1a0f000 index:0x0 [ 186.256617] flags: 0x2fffc0000000100(slab) [ 186.260828] raw: 02fffc0000000100 ffff8801c1a0f000 0000000000000000 0000000100000006 [ 186.268684] raw: ffffea0006ddfda0 ffffea0006dceb20 ffff8801dac00940 0000000000000000 [ 186.276539] page dumped because: kasan: bad access detected [ 186.282221] [ 186.283822] Memory state around the buggy address: [ 186.288730] ffff8801c1a0fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.296064] ffff8801c1a0fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.303406] >ffff8801c1a0fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.310739] ^ [ 186.314861] ffff8801c1a0fb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 186.322196] ffff8801c1a0fc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.329527] ================================================================== [ 186.336859] Disabling lock debugging due to kernel taint [ 186.342334] Kernel panic - not syncing: panic_on_warn set ... [ 186.342334] [ 186.349689] CPU: 0 PID: 27178 Comm: syz-executor3 Tainted: G B 4.16.0-rc7+ #6 [ 186.358169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 186.367507] Call Trace: [ 186.370087] dump_stack+0x194/0x24d [ 186.373709] ? arch_local_irq_restore+0x53/0x53 [ 186.378367] ? trace_hardirqs_on_thunk+0x1a/0x1c [ 186.383114] ? vsnprintf+0x1ed/0x1900 [ 186.386899] ? _decode_session4+0x15b0/0x1990 [ 186.392085] panic+0x1e4/0x41c [ 186.395265] ? refcount_error_report+0x214/0x214 [ 186.400006] ? add_taint+0x1c/0x50 [ 186.403531] ? add_taint+0x1c/0x50 [ 186.407056] ? _decode_session4+0x15f0/0x1990 [ 186.411539] kasan_end_report+0x50/0x50 [ 186.415496] kasan_report+0x149/0x360 [ 186.419285] __asan_report_load1_noabort+0x14/0x20 [ 186.424200] _decode_session4+0x15f0/0x1990 [ 186.428518] __xfrm_decode_session+0x68/0x110 [ 186.433001] vti6_tnl_xmit+0x36d/0x1820 [ 186.436966] ? dev_queue_xmit_nit+0x9b0/0xc40 [ 186.441452] ? trace_hardirqs_off+0x10/0x10 [ 186.445764] ? vti6_ioctl+0x940/0x940 [ 186.449571] dev_hard_start_xmit+0x24e/0xac0 [ 186.453981] ? SYSC_sendto+0x361/0x5c0 [ 186.457861] ? validate_xmit_skb_list+0x120/0x120 [ 186.462699] ? lock_acquire+0x1d5/0x580 [ 186.466653] ? lock_acquire+0x1d5/0x580 [ 186.470611] ? __dev_queue_xmit+0x2781/0x2fc0 [ 186.475088] ? __dev_queue_xmit+0x2fe/0x2fc0 [ 186.479485] ? lock_release+0xa40/0xa40 [ 186.483442] ? validate_xmit_skb+0x512/0xb00 [ 186.487836] ? netif_skb_features+0x9b0/0x9b0 [ 186.492325] __dev_queue_xmit+0x26bf/0x2fc0 [ 186.496641] ? netdev_pick_tx+0x2c0/0x2c0 [ 186.500772] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 186.505948] ? __sched_text_start+0x8/0x8 [ 186.510090] ? print_irqtrace_events+0x270/0x270 [ 186.514827] ? trace_hardirqs_off+0x10/0x10 [ 186.519130] ? refcount_add_not_zero+0x133/0x200 [ 186.523859] ? refcount_dec_if_one+0x20/0x20 [ 186.528248] ? refcount_add+0x24/0x60 [ 186.532027] ? skb_set_owner_w+0x232/0x330 [ 186.536236] ? sock_alloc_send_pskb+0x6ba/0x9b0 [ 186.540887] ? sock_wmalloc+0x1d0/0x1d0 [ 186.544838] ? dev_get_by_index+0xbf/0x170 [ 186.549045] ? lock_downgrade+0x980/0x980 [ 186.553171] ? __dev_get_by_index+0x1a0/0x1a0 [ 186.557643] ? cap_capable+0x1b5/0x230 [ 186.561505] ? security_capable+0x8e/0xc0 [ 186.565631] dev_queue_xmit+0x17/0x20 [ 186.569405] ? dev_queue_xmit+0x17/0x20 [ 186.573353] packet_sendmsg+0x3aed/0x60b0 [ 186.577478] ? debug_check_no_locks_freed+0x3c0/0x3c0 [ 186.582648] ? find_held_lock+0x35/0x1d0 [ 186.586700] ? clockevents_exchange_device+0x2e8/0x4e0 [ 186.591954] ? packet_cached_dev_get+0x2b0/0x2b0 [ 186.596691] ? __lock_is_held+0xb6/0x140 [ 186.600733] ? trace_hardirqs_off+0x10/0x10 [ 186.605036] ? iterate_fd+0x3f0/0x3f0 [ 186.608813] ? debug_mutex_init+0x1c/0x60 [ 186.612937] ? find_held_lock+0x35/0x1d0 [ 186.616978] ? __might_fault+0x110/0x1d0 [ 186.621016] ? lock_downgrade+0x980/0x980 [ 186.625142] ? lock_release+0xa40/0xa40 [ 186.629088] ? check_same_owner+0x320/0x320 [ 186.633382] ? __check_object_size+0x8b/0x530 [ 186.637862] ? security_socket_sendmsg+0x89/0xb0 [ 186.642594] ? packet_cached_dev_get+0x2b0/0x2b0 [ 186.647325] sock_sendmsg+0xca/0x110 [ 186.651018] SYSC_sendto+0x361/0x5c0 [ 186.654709] ? SYSC_connect+0x4a0/0x4a0 [ 186.658660] ? get_unused_fd_flags+0x190/0x190 [ 186.663219] ? alloc_file+0x27e/0x390 [ 186.666992] ? _raw_spin_unlock+0x22/0x30 [ 186.671119] ? sock_alloc_file+0x2a6/0x560 [ 186.675329] ? __alloc_fd+0x750/0x750 [ 186.679101] ? __might_sleep+0x95/0x190 [ 186.683051] ? SyS_futex+0x269/0x390 [ 186.686738] ? fd_install+0x4d/0x60 [ 186.690341] ? do_futex+0x22a0/0x22a0 [ 186.694114] ? SyS_socket+0x12d/0x1d0 [ 186.697889] ? move_addr_to_kernel+0x60/0x60 [ 186.702275] SyS_sendto+0x40/0x50 [ 186.705703] ? SyS_getpeername+0x30/0x30 [ 186.709740] do_syscall_64+0x281/0x940 [ 186.713602] ? __do_page_fault+0xc90/0xc90 [ 186.717811] ? _raw_spin_unlock_irq+0x27/0x70 [ 186.722281] ? finish_task_switch+0x1c1/0x7e0 [ 186.726749] ? syscall_return_slowpath+0x550/0x550 [ 186.731654] ? syscall_return_slowpath+0x2ac/0x550 [ 186.736560] ? prepare_exit_to_usermode+0x350/0x350 [ 186.741551] ? entry_SYSCALL_64_after_hwframe+0x52/0xb7 [ 186.746892] ? trace_hardirqs_off_thunk+0x1a/0x1c [ 186.751711] entry_SYSCALL_64_after_hwframe+0x42/0xb7 [ 186.756871] RIP: 0033:0x4548b9 [ 186.760035] RSP: 002b:00007ff614e1ac68 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 186.767717] RAX: ffffffffffffffda RBX: 00007ff614e1b6d4 RCX: 00000000004548b9 [ 186.774961] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000016 [ 186.782207] RBP: 000000000072bea0 R08: 0000000020000000 R09: 000000000000001c [ 186.789450] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000ffffffff [ 186.796694] R13: 00000000000004f3 R14: 00000000006f9768 R15: 0000000000000000 [ 186.804360] Dumping ftrace buffer: [ 186.807877] (ftrace buffer empty) [ 186.811555] Kernel Offset: disabled [ 186.815168] Rebooting in 86400 seconds..